last executing test programs: 12.509235067s ago: executing program 0 (id=4904): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) r3 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb810013000805000817a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca496e8207377a0b02da9b6b5f9dbacf68e1ecd9b71d26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626dd33800b261e2f6292f759b1c6d900000000"], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) 11.679061199s ago: executing program 2 (id=4906): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r7, 0xc0a85322, &(0x7f0000000500)) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x1d}, 0x0) bpf$PROG_LOAD(0x12, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8, r5}) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r9 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r8) keyctl$set_timeout(0xf, r9, 0xfffff49f) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r10, 0x40045010, &(0x7f0000001b80)=0xfffffffa) ioctl$SNDCTL_DSP_SETTRIGGER(r10, 0x40045010, &(0x7f0000000080)=0x7) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="46050200340fd035927cfe3c", 0xc}], 0x1}, 0x9cdc2384016b4068) 11.545902883s ago: executing program 1 (id=4907): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x8, 0x40, 0x9, 0xf, 0x4, 0xf, 0xe5, 0x3ff, 0xfffffffffffffc00, 0x80000001, 0x3, 0x8, 0x0, 0x5, 0x9, 0x84], 0xeeef0000, 0x78051}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x3000, 0x8, 0x1, 0x3, 0x4, 0x40, 0xd, 0x0, 0x2e, 0x17}, {0x4, 0x2, 0x3, 0x2, 0x40, 0x7, 0x7f, 0x8, 0x5, 0x6, 0x3, 0x1}, {0x80a0000, 0x4000, 0x4, 0x3, 0x1, 0x9, 0x0, 0x60, 0x0, 0xa7, 0x8, 0x81}, {0x2000, 0x10000, 0xa, 0x6, 0x3, 0x2, 0x1, 0xf8, 0x9, 0x9, 0x6}, {0x4000, 0x1000, 0x10, 0x2, 0x15, 0x6, 0xab, 0x7c, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0x4000, 0xc, 0x9c, 0xb1, 0x8, 0x0, 0xa0, 0x9, 0x13, 0x1, 0xf}, {0x8088000, 0x1, 0x4, 0x5, 0x40, 0x5, 0x4, 0x3, 0x3, 0x84, 0x3, 0x71}, {0x0, 0x5000, 0x8, 0x5, 0xf, 0x7, 0x3, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0xdddd1000, 0x30}, {0x3000, 0x7}, 0x80000031, 0x0, 0x80a0000, 0x2024, 0x5, 0x0, 0x3000, [0x6800000000000000, 0x9, 0x63, 0x3]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0, 0x7ffb}], 0x1, 0x61, 0x0, 0x0) 10.685535865s ago: executing program 1 (id=4909): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/27, 0x1b) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0xfffffffd}, &(0x7f00000002c0)=0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x9, 0x3, 0x368, 0x0, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, &(0x7f0000000480), {[{{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x6], 0x7, 0x2, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x800, 0x917e, 0x74b2, 'snmp\x00', 'syz0\x00', {0x7}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x32}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0x0, 0xff, 0xff], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'veth0_to_team\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x6, 0x0, 0x0, 0x10}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x67c2, 0x2}}, @common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x3}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3, 0x2, {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r9, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x2, r7, 0x0}]) vmsplice(r8, &(0x7f0000000240)=[{&(0x7f00000004c0)="9ea12748c9ffb42e00", 0x9}], 0x1, 0x8) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r10, &(0x7f0000000400)={&(0x7f0000000240), 0x10, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000004a020000ae0b000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="020000800100000200e3b886dcc91f4b5c5f35e347c67500"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@getqdisc={0x38, 0x26, 0x800, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xe, 0xb}, {0xb, 0xa}, {0x1, 0xb}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="13000000f8ffffff01000100", @ANYRES32=r8, @ANYBLOB='\b\x00'/20, @ANYRES32=r13, @ANYRES32=r8, @ANYBLOB="03000000010000000500"/24, @ANYRES32, @ANYBLOB], 0x50) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001900010000000000000000000a"], 0x1c}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 10.288357526s ago: executing program 1 (id=4912): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r4}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_VF_PORTS={0x4}, @IFLA_VFINFO_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x3c}}, 0x20048000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r8 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x10, 0x1f, 0x8, 0x10, {0x4e26, 0x4e22, [0x3, 0x6, 0xf, 0xc3], [0x1cf9, 0xe, 0x40000000, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x9, 0xc3}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000480)={{}, {@val={r7}, @actul_num={@void, 0x3ff, 0x6b}}}) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x5) syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406000005240008000d240f0106000000018002000d0904"], 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000004c0)) 9.578227652s ago: executing program 2 (id=4913): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101401, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x40100, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) getgroups(0x7, &(0x7f0000000280)=[0xee00, 0xee00, 0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0x0]) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000300)=0x0) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x2, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffeffffffffc, 0x1, 0x3966, 0x0, 0x8000, 0x0, r8, r9, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r8, r10, 0x1000) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000440)=0xe8) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1100000, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030303030303030f3c530303030303030303134303030302c757365725f6976b3732681b8d26d1ee39f936af34ec9baaec4cd3c96d02139659f261a11628b8af758a1a15de87b5a244d494d4f5cae4d8c4c0ba5153297ac6428755dd80a045600fc16351b4e67843e44acbf1bdd1c2d528dc2d7a40ff831ec3a81ca473aa9deb9c33b3179bbfdb6a216d9", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',hash,audit,euid=', @ANYRESDEC=r5, @ANYBLOB=',euid<', @ANYRESDEC=r8, @ANYBLOB=',fsuuid=3eb\x009b88-9baa-1c15-b8f9-c8ae86eK,measure,euid=', @ANYRESDEC=r11, @ANYBLOB=',obj_user=/dev/uinput\x00,\x00'], 0x1, 0x0, &(0x7f00000005c0)="011b0ee39cc70dc2ba97e60f1dc82e4f3c80ebb826c54c158053992579fb62b898da42d5309520b314c7634108e192f18e2eb51f107a3b0205dd10ca5f8039156624dac9ef737df605366f01a7ab8d28b5f561f1574f7d661da14b69a92a6515ff7830cd291e70a4be6c9b0a58260584ad2981dc11de32834d5ab7245e9e398ed09298bf9750f86e8473dcfe6ecc5a4747954fdb5016c6379de4197bdff8f96815eca4bbc6a38792") socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r12], 0x0) 9.15827932s ago: executing program 0 (id=4914): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x4, 0x52, 0x58, 0x6}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000026bd7000fedbdf250a9080fe14d6781d1ef562e4", @ANYRES32=0x0, @ANYBLOB="14000100fc0100000000000000000000000000011400020020010000000000000000000000000002"], 0x40}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000026bd7000fedbdf250a9080fe14d6781d1ef562e4", @ANYRES32=0x0, @ANYBLOB="14000100fc0100000000000000000000000000011400020020010000000000000000000000000002"], 0x40}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, 0x0) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10005}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10005}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) socket$inet(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x20040810) (async) sendmsg$nl_xfrm(r6, 0x0, 0x20040810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xd, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xd, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f0005ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f0005ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000300)={{@host, 0x8}, 0x1}) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r8, &(0x7f00000042c0)={0x2020}, 0x2020) (async) read$FUSE(r8, &(0x7f00000042c0)={0x2020}, 0x2020) 8.849445554s ago: executing program 0 (id=4915): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300026c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0xe01, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x5) connect$inet(r1, &(0x7f0000000600)={0x2, 0x4e21, @broadcast}, 0xd) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x1, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000000)={0x9d6, 0xfff, 0x3, 0x3, 0x15, "82df7f7b13f5edd6"}) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g') 7.356756226s ago: executing program 2 (id=4917): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default '], 0x2a, 0x0) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x0, &(0x7f0000000080)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000007c0)=0x80000033) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = io_uring_setup(0x4d0d, &(0x7f0000000a40)={0x0, 0xf689, 0x2, 0xfffffffe, 0x3bd}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) close_range(r3, 0xffffffffffffffff, 0x0) 7.02594608s ago: executing program 1 (id=4918): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400802, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000000)={r5, @in={{0x2, 0x4e24, @empty}}, 0x100, 0x600}, 0x90) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$userio(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) epoll_create1(0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {0x0}], 0x2}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x30, 0xde, 0xf, 0x10, 0x5dc, 0x1, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x14, [{{0x9, 0x4, 0xa1, 0x5, 0x0, 0x96, 0x91, 0x3a}}]}}]}}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="01"]) ioctl$KVM_RUN(r8, 0xae80, 0x0) 6.952691804s ago: executing program 4 (id=4919): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r1 = socket$inet(0x2, 0x2, 0x7) shutdown(r1, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x7) r2 = open(&(0x7f0000000380)='./bus\x00', 0xeb40, 0x14) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r2], 0x2b) sendfile(r4, r2, 0x0, 0x4000000053d2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x364d4eca, 0x1, 0x1, "f7b817716daef7e53fa4f998da1907309f97630a33ea3b6bd13c74c37001fd36", 0x55595659}) 6.39414293s ago: executing program 4 (id=4920): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) unshare(0x22020400) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000001c0), 0x2, 0x0) r2 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0xc, 0xff9, &(0x7f0000001840)=""/4089, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000080)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) listen(r4, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x7e, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) listen(r0, 0x0) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$unlink(0x9, r5, r5) syz_open_dev$video4linux(&(0x7f0000000000), 0x8, 0x114601) ioctl$VIDIOC_S_EDID(r6, 0xc0285629, &(0x7f0000000080)={0x0, 0x3, 0x0, '\x00', 0x0}) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x2, 0x4) listen(r7, 0x3) 6.393078729s ago: executing program 2 (id=4921): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r6, 0xc0a85322, &(0x7f0000000500)) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xfffffffffffffdf2}) bpf$PROG_LOAD(0x12, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8, r4}) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r8 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r7) keyctl$set_timeout(0xf, r8, 0xfffff49f) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000001b80)=0xfffffffa) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000080)=0x7) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="46050200340fd035927cfe3c", 0xc}], 0x1}, 0x9cdc2384016b4068) 6.13605386s ago: executing program 4 (id=4922): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/27, 0x1b) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0xfffffffd}, &(0x7f00000002c0)=0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x9, 0x3, 0x368, 0x0, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, &(0x7f0000000480), {[{{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x6], 0x7, 0x2, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x800, 0x917e, 0x74b2, 'snmp\x00', 'syz0\x00', {0x7}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x32}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0x0, 0xff, 0xff], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'veth0_to_team\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x6, 0x0, 0x0, 0x10}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x67c2, 0x2}}, @common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x3}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3, 0x2, {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r9, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x2, r7, 0x0}]) vmsplice(r8, &(0x7f0000000240)=[{&(0x7f00000004c0)="9ea12748c9ffb42e00", 0x9}], 0x1, 0x8) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r10, &(0x7f0000000400)={&(0x7f0000000240), 0x10, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000004a020000ae0b000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="020000800100000200e3b886dcc91f4b5c5f35e347c67500"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@getqdisc={0x38, 0x26, 0x800, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xe, 0xb}, {0xb, 0xa}, {0x1, 0xb}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="13000000f8ffffff01000100", @ANYRES32=r8, @ANYBLOB='\b\x00'/20, @ANYRES32=r13, @ANYRES32=r8, @ANYBLOB="03000000010000000500"/24, @ANYRES32, @ANYBLOB], 0x50) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001900010000000000000000000a"], 0x1c}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 5.579085341s ago: executing program 4 (id=4924): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) r3 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb810013000805000817a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca496e8207377a0b02da9b6b5f9dbacf68e1ecd9b71d26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626dd33800b261e2f6292f759b1c6d900000000"], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) 4.829737719s ago: executing program 3 (id=4925): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 4.616624876s ago: executing program 3 (id=4926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x44, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000900)={@in={{0x2, 0x4e24, @remote}}, 0x0, 0x0, 0x1e, 0x0, "a1e6c7030e64fe0110f53a64d4d17bde44eb9bc4a67e5693d9695f4918d4334e64441a7fdb5521c32a13c9609690275c1895f8c78c0514baf150cc88eb6d97feb1bff8b13b8405ae2f0f428030503a06"}, 0xd8) r3 = syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000024c0)={{0x0, 0x3333e000, 0xf, 0x10, 0x4, 0x4, 0x6, 0x57, 0xf, 0xff, 0xd, 0x2}, {0x8000000, 0xdddd0000, 0x9, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x3, 0x5, 0x60}, {0xeeef0000, 0x4, 0x4, 0xe7, 0xff, 0x9, 0xb, 0x0, 0x3, 0x2, 0xf0, 0x9}, {0x80a0000, 0xffff1000, 0xa, 0x5, 0x6, 0x2, 0xd, 0x1, 0x9c, 0x9, 0x9f, 0x8}, {0x2000, 0xdddd1000, 0xf, 0x2a, 0x0, 0x7, 0x2, 0x9e, 0x3, 0x6, 0x4, 0x3}, {0x4, 0xeeef0000, 0xa, 0xf7, 0x5, 0x3, 0x2, 0x1c, 0x18, 0x6, 0x4, 0x1}, {0xdddd1000, 0x4000, 0xe, 0x0, 0x5, 0x9, 0x8, 0x40, 0x6, 0x9, 0x1, 0xfa}, {0x4000, 0xd000, 0xf, 0x7, 0xe, 0x0, 0x9, 0x3, 0x9, 0x5, 0x9, 0x9f}, {0x4, 0x64}, {0xd000, 0x41d0}, 0x20, 0x0, 0x5000, 0x10000, 0xf, 0xec00, 0x10000, [0xe46, 0x8, 0x6]}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) 4.288802234s ago: executing program 0 (id=4927): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8243, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x80, 0xf7, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x4, 0x46, 0x1, {0x22, 0x557}}, {{{0x9, 0x5, 0x81, 0x3, 0xe09124196dbdccb4, 0x6, 0xba, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x9, 0x81, 0x2}}]}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x300, 0x3, 0x3, 0xff, 0x10, 0x7}, 0x4e, &(0x7f0000000900)={0x5, 0xf, 0x4e, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0xf0, 0x8, 0x6fa}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x4, 0x8, 0x7a, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1e, 0x9, 0x6, 0x5}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0x7, 0xff0f, 0x3c72, [0x3f30, 0x1fbf, 0x0, 0x3fc0, 0x3f00, 0x60]}]}, 0x3, [{0x6e, &(0x7f0000000980)=@string={0x6e, 0x3, "2b4ecb776c876714baaf0d6eac4f348ad51d8ecd5c71027385ca3c3470169ea0a3426ec4d3bca0e6cdefa3fd78a4d809792a7663c80ebdbfc28ff15c2559fd3f694d5355f49a41d3784eb9b44066ca54a280f4946c24fd87f577f7be407a720b5c8f1fdd8d7a704fc28747ef"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x810}}, {0x102, &(0x7f0000000a40)=@string={0x102, 0x3, "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"}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.243958352s ago: executing program 2 (id=4928): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r4}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_VF_PORTS={0x4}, @IFLA_VFINFO_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x3c}}, 0x20048000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r8 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x10, 0x1f, 0x8, 0x10, {0x4e26, 0x4e22, [0x3, 0x6, 0xf, 0xc3], [0x1cf9, 0xe, 0x40000000, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x9, 0xc3}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000480)={{}, {@val={r7}, @actul_num={@void, 0x3ff, 0x6b}}}) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x5) syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406000005240008000d240f0106000000018002000d0904"], 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000004c0)) 3.630951432s ago: executing program 1 (id=4929): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x20, 0x5, 0x5, "8631dc94cb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x2b, 0x3, 0x400) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0x2, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xfff1, 0xffff}, {0x4}}, [@TCA_STAB={0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffc01}]}, 0x30}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x46f3eb640981d409, &(0x7f00000002c0)=ANY=[@ANYBLOB="7b87f20f46"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200), &(0x7f0000000300)={0x0, 0xfb, 0x10a, 0x0, 0x0, "0192add2b7644205b9a7bf914c32f865", "c23293bbfdfa79302a47814d67309af114f74edcfd5fb1155d57647c8178046fc2eab17370058153c86ed0a8074e83e49c87b8d19b12dc560e186e9d6cd8473e63ccdd53c7ef3aab8b5f64c83bada95a0bcb20783603851cc0c97ec7f22a9b5ff5472a1e9bfea0ec9d604eb8aabb774095e8c19a515446fd3ebad580bd02165ec1442299178a9a7e32647cde00ca8c938e2b72537402abda7a94764ca2304a480f3afab2c3f61048f39098984726ba4b985521536b41c300bcf0a8ef5424ab596bcc64b5fa1556fda535a1df0fe592e877d50e3d10defb56922f7522896961b96d4e84b95765b5163148ea889a40aca0822e60d318"}, 0x10a, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000000c0)=@string={0x2}}, {0x12, &(0x7f0000000180)=@string={0x12, 0x3, "975fe9318817068be22f51f39edd01dc"}}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000240)}, {0x0}, {&(0x7f00000005c0)="ebb31446", 0x4}], 0x3}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) 3.565196799s ago: executing program 3 (id=4930): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0xfffffffffffffff7, 0x28a440) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) fsopen(0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000029c0)=""/4093, 0xd65}, {&(0x7f00000003c0)=""/186, 0xba}, {&(0x7f0000000240)=""/129, 0x81}], 0x3}, 0x1005}], 0x1, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x31, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 2.42005476s ago: executing program 0 (id=4931): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x1, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1, 0x4}}}]}, 0x24}, 0x1, 0x5502000000000000, 0x0, 0x80000c0}, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_unlink(0x0) getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) 2.365785328s ago: executing program 4 (id=4932): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x140) close_range(r2, r4, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000300)={r7}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c64d2, &(0x7f0000000280)={r8, 0x80000}) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r12, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KVM_GET_ONE_REG(r10, 0x4018aee3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r10, @ANYRES32=0x0, @ANYRESOCT=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x8000002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r13, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000777e0180000010004000000b3cb331814fbc22797c6e71dca"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x2) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0) 2.28946683s ago: executing program 0 (id=4933): syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d22a6640da0320283c529a0000010902440001000000000904000000ef040105002406000105240000000d240f01000000000600"], 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @broadcast}, 0x14) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r10 = socket(0x22, 0x2, 0x24) setsockopt$RXRPC_SECURITY_KEY(r10, 0x110, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x20, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x41, &(0x7f00000003c0)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff01, 0xb7c56ad10922c48a, 0x3}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40098}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) 2.201793991s ago: executing program 4 (id=4934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}}, 0x4000) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r6, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0xac, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0x3}, {0xffff, 0xfff5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x14, 0x8670, 0x5, 0x1, 0x5c4}}, {0x4}}, {{0x1c, 0x1, {0x22, 0x0, 0x2, 0xf21, 0x0, 0x2, 0x0, 0x3}}, {0xa, 0x2, [0x3, 0x8, 0x0]}}, {{0x1c, 0x1, {0x2, 0x9, 0x7fff, 0x101, 0x0, 0x4, 0x7, 0x6}}, {0x10, 0x2, [0x7, 0x9, 0x8, 0x8, 0x6, 0x7]}}]}]}, 0xac}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x48b, 0x0, 0x8}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000000000)={0x4, 0x4, 0xfffffffc, 0x24c5, 0x0, 0x40000007}) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000740), &(0x7f0000000b00)=@v3={0x3000000, [{0x2, 0x8}, {0xff, 0x10001}]}, 0x18, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'osx.', '\x00'}) 2.065954741s ago: executing program 3 (id=4935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 1.953486168s ago: executing program 3 (id=4936): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x1, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaa2aaaaaaaaaaaaabb080045000020cfdbe3eea02f9078e0000002e00000012001880b000c907844b80057"], 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000ff2bf8fe589dc698970b5fcd51c9d3fc5a53813c3f636db013907b4ff7010000d57a9f446c78069662746f66478124aa3602a461dd5cb2712c35f9d476d6b765e4bc9c317a4a5d7ce05eb49ff1b72bfe312579d867664f42131436f71c0df437544e5e6a59ff7a0f196e05fa44b9d3f0147566efc8875ac84c486c9afa6ea153fa1c3641aa1e781d67bf25add806f961ec24d02d3000"/163, @ANYRES16=r5, @ANYBLOB="010027bd7000fedbdf254100000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4040004) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r8 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r8, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r9, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r9, 0x407, 0x100000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.005508636s ago: executing program 1 (id=4937): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101401, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x40100, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) getgroups(0x7, &(0x7f0000000280)=[0xee00, 0xee00, 0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0x0]) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000300)=0x0) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x2, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffeffffffffc, 0x1, 0x3966, 0x0, 0x8000, 0x0, r8, r9, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r8, r10, 0x1000) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000440)=0xe8) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1100000, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030303030303030f3c530303030303030303134303030302c757365725f6976b3732681b8d26d1ee39f936af34ec9baaec4cd3c96d02139659f261a11628b8af758a1a15de87b5a244d494d4f5cae4d8c4c0ba5153297ac6428755dd80a045600fc16351b4e67843e44acbf1bdd1c2d528dc2d7a40ff831ec3a81ca473aa9deb9c33b3179bbfdb6a216d9", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',hash,audit,euid=', @ANYRESDEC=r5, @ANYBLOB=',euid<', @ANYRESDEC=r8, @ANYBLOB=',fsuuid=3eb\x009b88-9baa-1c15-b8f9-c8ae86eK,measure,euid=', @ANYRESDEC=r11, @ANYBLOB=',obj_user=/dev/uinput\x00,\x00'], 0x1, 0x0, &(0x7f00000005c0)="011b0ee39cc70dc2ba97e60f1dc82e4f3c80ebb826c54c158053992579fb62b898da42d5309520b314c7634108e192f18e2eb51f107a3b0205dd10ca5f8039156624dac9ef737df605366f01a7ab8d28b5f561f1574f7d661da14b69a92a6515ff7830cd291e70a4be6c9b0a58260584ad2981dc11de32834d5ab7245e9e398ed09298bf9750f86e8473dcfe6ecc5a4747954fdb5016c6379de4197bdff8f96815eca4bbc6a38792") pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r12], 0x0) 863.398407ms ago: executing program 3 (id=4938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1a77d400", @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf250a0000000c009900040000001f000000090007004274e10ad400000038005080110001004573423a66b52879b9aaa8aea900000005000900000000001000040063ab779f3ed393349d9877cb0800030005ac0f0048005080090001002c9c62f04800000009000100c8f0e8899f0000000500090001000000090001008d6cc839b1000000050009000000000004000500040006000800088004000100"], 0xac}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000082000040"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141220, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000204004d1504"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40890}, 0x24008004) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000100)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x2, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x3c}}, 0x0) 0s ago: executing program 2 (id=4939): socket$inet6_sctp(0xa, 0x1, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x204000, 0x0) r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000001080)={'filter\x00', 0x0, 0x4, 0x1000, [0x8, 0x800, 0x100000001, 0x5, 0x6], 0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/4096}, &(0x7f0000001100)=0x78) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9, 0xfffffffa}}}}}, 0x0) r5 = socket(0x10, 0x80002, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) capset(&(0x7f0000000080)={0x20080522}, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x5, 0x7, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x700, 0x1, 0x3}}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r7}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="400063bc560289b3d15d8c96cd9c0004000000", @ANYRES32=0x0, @ANYBLOB="0003000001800000200012800800010067726500140002800500080003000000050009"], 0x40}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x5) kernel console output (not intermixed with test programs): t offset 5/7 [ 1319.367915][T22325] logitech 0003:046D:C298.005F: parse failed [ 1319.378537][T22325] logitech 0003:046D:C298.005F: probe with driver logitech failed with error -22 [ 1319.600308][T22486] binder: 22485:22486 ioctl c018620c 200000000000 returned -1 [ 1319.701021][T22325] usb 4-1: USB disconnect, device number 107 [ 1319.769565][T22490] binder: 22485:22490 ioctl 400c620e 200000000140 returned -22 [ 1320.455929][T22515] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4666'. [ 1320.927751][ T5888] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1321.079993][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 1321.154407][ T5888] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 1321.221920][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.380900][ T5888] usb 4-1: Product: syz [ 1321.392604][ T5888] usb 4-1: Manufacturer: syz [ 1321.417949][ T5888] usb 4-1: SerialNumber: syz [ 1321.459338][ T5888] usb 4-1: config 0 descriptor?? [ 1321.489436][ T5888] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1321.582501][ T5888] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 1321.601635][ T5888] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1321.601635][ T5888] Please send a copy of this message to and [ 1321.928028][ T5888] usb 4-1: USB disconnect, device number 108 [ 1322.627006][T22543] FAULT_INJECTION: forcing a failure. [ 1322.627006][T22543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1322.673697][T22543] CPU: 1 UID: 0 PID: 22543 Comm: syz.3.4676 Not tainted syzkaller #0 PREEMPT(full) [ 1322.673722][T22543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1322.673733][T22543] Call Trace: [ 1322.673740][T22543] [ 1322.673745][T22543] dump_stack_lvl+0x189/0x250 [ 1322.673763][T22543] ? __pfx____ratelimit+0x10/0x10 [ 1322.673777][T22543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1322.673796][T22543] ? __pfx__printk+0x10/0x10 [ 1322.673807][T22543] ? __might_fault+0xb0/0x130 [ 1322.673826][T22543] should_fail_ex+0x414/0x560 [ 1322.673844][T22543] _copy_from_user+0x2d/0xb0 [ 1322.673858][T22543] ucma_leave_multicast+0xc7/0x620 [ 1322.673874][T22543] ? __pfx_ucma_leave_multicast+0x10/0x10 [ 1322.673893][T22543] ucma_write+0x249/0x2e0 [ 1322.673906][T22543] ? __pfx_ucma_write+0x10/0x10 [ 1322.673916][T22543] ? security_file_permission+0x75/0x290 [ 1322.673929][T22543] ? rw_verify_area+0x255/0x4d0 [ 1322.673943][T22543] vfs_writev+0x4b6/0x960 [ 1322.673956][T22543] ? __pfx_ucma_write+0x10/0x10 [ 1322.673968][T22543] ? __pfx_vfs_writev+0x10/0x10 [ 1322.673985][T22543] ? __fget_files+0x2a/0x420 [ 1322.673997][T22543] ? __fget_files+0x3a0/0x420 [ 1322.674005][T22543] ? __fget_files+0x2a/0x420 [ 1322.674019][T22543] do_writev+0x14d/0x2d0 [ 1322.674030][T22543] ? __pfx_do_writev+0x10/0x10 [ 1322.674044][T22543] ? do_syscall_64+0xbe/0xfa0 [ 1322.674062][T22543] do_syscall_64+0xfa/0xfa0 [ 1322.674075][T22543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.674085][T22543] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1322.674094][T22543] ? clear_bhb_loop+0x60/0xb0 [ 1322.674106][T22543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.674115][T22543] RIP: 0033:0x7fb77f98f6c9 [ 1322.674125][T22543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1322.674134][T22543] RSP: 002b:00007fb780824038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1322.674146][T22543] RAX: ffffffffffffffda RBX: 00007fb77fbe5fa0 RCX: 00007fb77f98f6c9 [ 1322.674153][T22543] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000011 [ 1322.674160][T22543] RBP: 00007fb780824090 R08: 0000000000000000 R09: 0000000000000000 [ 1322.674166][T22543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.674172][T22543] R13: 00007fb77fbe6038 R14: 00007fb77fbe5fa0 R15: 00007fb77fd0fa28 [ 1322.674187][T22543] [ 1322.980464][ T5828] Bluetooth: hci1: command 0x0405 tx timeout [ 1323.087862][ T5831] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1323.350588][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 1323.358200][ T5831] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1323.365119][T22548] usb usb8: usbfs: process 22548 (syz.3.4678) did not claim interface 0 before use [ 1323.366408][ T5831] usb 3-1: config 0 has no interface number 0 [ 1323.379513][T22548] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1323.390865][T22549] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1323.392583][ T5831] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1323.407503][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.415855][ T5831] usb 3-1: Product: syz [ 1323.420184][ T5831] usb 3-1: Manufacturer: syz [ 1323.424812][ T5831] usb 3-1: SerialNumber: syz [ 1323.434351][ T5831] usb 3-1: config 0 descriptor?? [ 1323.449405][ T5831] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1323.559115][ T5895] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 1323.739488][ T5895] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 1323.750252][ T5895] usb 5-1: config 0 has no interface number 0 [ 1323.770356][ T5895] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1323.787751][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.807727][ T5895] usb 5-1: Product: syz [ 1323.811931][ T5895] usb 5-1: Manufacturer: syz [ 1323.816523][ T5895] usb 5-1: SerialNumber: syz [ 1323.840505][ T5895] usb 5-1: config 0 descriptor?? [ 1324.069785][ T5909] usb 3-1: USB disconnect, device number 87 [ 1324.275438][ T5895] usb 5-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 1324.455478][T22564] Failed to get privilege flags for destination (handle=0x2:0x25) [ 1324.486265][T22546] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4677'. [ 1324.501884][ T5895] usb 5-1: failed to fetch extended address, random address set [ 1324.759915][ T5895] usb 5-1: USB disconnect, device number 112 [ 1325.385719][ T5909] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1325.564931][T22580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4685'. [ 1325.597951][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 1325.747722][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.781746][ T5909] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1325.839487][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.869688][ T5909] usb 1-1: config 0 descriptor?? [ 1325.878030][ T5831] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1326.041694][ T5831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.237879][ T5831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1326.489253][ T5909] mcp2221 0003:04D8:00DD.0060: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1326.517876][ T5831] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1326.547739][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.582088][ T5831] usb 3-1: Product: syz [ 1326.585661][T22573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.595459][T22573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.641368][ T5831] usb 3-1: Manufacturer: syz [ 1326.651241][ T5831] usb 3-1: SerialNumber: syz [ 1326.672111][ T5831] usb 3-1: config 0 descriptor?? [ 1326.695670][ T5831] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1326.789040][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1326.978535][T22573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.991892][ T5831] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1327.041923][T22573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.058540][ T5831] usb 3-1: media controller created [ 1327.078224][T22573] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1327.127814][T22573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1327.158585][ T5909] usb 1-1: USB disconnect, device number 118 [ 1327.159777][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1327.286512][ T5831] DVB: Unable to find symbol tda10046_attach() [ 1327.305523][ T5831] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1327.334717][ T5831] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1327.788141][ T5831] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1327.811932][ T5831] usb 3-1: USB disconnect, device number 88 [ 1328.132905][T22606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1328.380759][T22610] Failed to get privilege flags for destination (handle=0x2:0x25) [ 1328.417969][ T5831] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1328.569411][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.579754][ T5831] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1328.594652][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.726588][ T5831] usb 1-1: config 0 descriptor?? [ 1328.753870][ T5831] pwc: Askey VC010 type 2 USB webcam detected. [ 1329.184152][T22608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.193939][T22608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.204778][ T5831] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1329.215720][ T5831] pwc: recv_control_msg error -32 req 02 val 2700 [ 1329.222787][ T5831] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1329.239985][ T5831] pwc: recv_control_msg error -32 req 04 val 1000 [ 1329.248074][ T5831] pwc: recv_control_msg error -32 req 04 val 1300 [ 1329.256951][ T5831] pwc: recv_control_msg error -32 req 04 val 1400 [ 1329.264164][ T5831] pwc: recv_control_msg error -32 req 02 val 2000 [ 1329.271502][ T5831] pwc: recv_control_msg error -32 req 02 val 2100 [ 1329.792690][ T5831] pwc: recv_control_msg error -32 req 02 val 2500 [ 1329.824474][ T5831] pwc: recv_control_msg error -32 req 02 val 2400 [ 1329.939072][ T1220] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1330.009479][ T5831] pwc: recv_control_msg error -71 req 02 val 2600 [ 1330.023302][ T5831] pwc: recv_control_msg error -71 req 02 val 2900 [ 1330.148040][ T5831] pwc: recv_control_msg error -71 req 02 val 2800 [ 1330.206569][ T5831] pwc: recv_control_msg error -71 req 04 val 1100 [ 1330.207562][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1330.243055][ T5831] pwc: recv_control_msg error -71 req 04 val 1200 [ 1330.250628][ T1220] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1330.260064][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.290419][ T1220] usb 4-1: Product: syz [ 1330.290774][ T5831] pwc: Registered as video103. [ 1330.294617][ T1220] usb 4-1: Manufacturer: syz [ 1330.301015][T22637] vivid-000: ================= START STATUS ================= [ 1330.352989][ T1220] usb 4-1: SerialNumber: syz [ 1330.460567][T22637] vivid-000: Generate PTS: true [ 1330.469754][ T5831] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input117 [ 1330.480162][ T1220] usb 4-1: config 0 descriptor?? [ 1330.660139][T22637] vivid-000: Generate SCR: true [ 1330.691713][T22637] tpg source WxH: 320x180 (Y'CbCr) [ 1330.704602][T22637] tpg field: 1 [ 1330.726773][T22637] tpg crop: (0,0)/320x180 [ 1330.731908][ T5831] usb 1-1: USB disconnect, device number 119 [ 1330.741492][T22637] tpg compose: (0,0)/320x180 [ 1330.761731][T22637] tpg colorspace: 3 [ 1330.777837][T22637] tpg transfer function: 0/2 [ 1330.784756][T22637] tpg Y'CbCr encoding: 2/1 [ 1330.808048][T22637] tpg quantization: 2/1 [ 1330.812356][T22637] tpg RGB range: 0/2 [ 1330.816422][T22637] vivid-000: ================== END STATUS ================== [ 1332.168028][T22325] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1332.347715][T22325] usb 5-1: Using ep0 maxpacket: 32 [ 1332.368172][T22325] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.388488][T22325] usb 5-1: config 0 has no interfaces? [ 1332.468280][T22325] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1332.503674][T22325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.570225][T22325] usb 5-1: Product: syz [ 1332.618750][ T5831] usb 4-1: USB disconnect, device number 109 [ 1332.647786][T22325] usb 5-1: Manufacturer: syz [ 1332.670170][T22325] usb 5-1: SerialNumber: syz [ 1332.719304][T22325] usb 5-1: config 0 descriptor?? [ 1333.091064][T22663] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4706'. [ 1333.707751][T22325] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1333.739881][T22669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.754288][T22669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.877874][T22325] usb 1-1: Using ep0 maxpacket: 32 [ 1333.887346][T22325] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1333.895639][T22325] usb 1-1: config 0 has no interface number 0 [ 1333.903805][T22325] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1333.913431][T22325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.921585][T22325] usb 1-1: Product: syz [ 1333.927513][T22325] usb 1-1: Manufacturer: syz [ 1333.932265][T22325] usb 1-1: SerialNumber: syz [ 1333.946930][T22325] usb 1-1: config 0 descriptor?? [ 1333.959184][T22325] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1333.967264][T22325] dvb-usb: bulk message failed: -22 (2/0) [ 1333.976608][T22325] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1333.991196][T22325] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1333.999547][T22325] usb 1-1: media controller created [ 1334.015480][T22325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1334.033227][T22325] cxusb: set interface failed [ 1334.038379][T22325] dvb-usb: bulk message failed: -22 (1/0) [ 1334.066644][T22325] DVB: Unable to find symbol lgdt330x_attach() [ 1334.074094][T22325] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1334.117902][ T5831] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1334.137926][ T5909] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1334.145744][T22325] rc_core: IR keymap rc-dvico-portable not found [ 1334.154471][T22325] Registered IR keymap rc-empty [ 1334.160513][T22325] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1334.174598][T22325] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input118 [ 1334.186384][T22325] dvb-usb: schedule remote query interval to 100 msecs. [ 1334.193801][T22325] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1334.218200][ T5902] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1334.235437][T22679] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4707'. [ 1334.267882][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 1334.274404][ T5831] usb 2-1: config 0 has no interfaces? [ 1334.281165][ T5831] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1334.290506][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.300837][ T5831] usb 2-1: config 0 descriptor?? [ 1334.308145][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 1334.314156][T22325] dvb-usb: bulk message failed: -22 (1/0) [ 1334.321573][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.334310][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.344601][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1334.351699][ T5909] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1334.360909][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.371023][ T5909] usb 3-1: config 0 descriptor?? [ 1334.380018][ T5902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.391515][ T5902] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1334.401149][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.411887][ T5902] usb 4-1: config 0 descriptor?? [ 1334.420903][ T5902] pwc: Askey VC010 type 2 USB webcam detected. [ 1334.428039][T22325] dvb-usb: bulk message failed: -22 (1/0) [ 1334.538656][T22325] dvb-usb: bulk message failed: -22 (1/0) [ 1334.657957][T22325] dvb-usb: bulk message failed: -22 (1/0) [ 1334.767846][T22325] dvb-usb: bulk message failed: -22 (1/0) [ 1334.782333][ T5909] kye 0003:0458:0138.0061: unknown main item tag 0x0 [ 1334.795380][ T5909] kye 0003:0458:0138.0061: unknown main item tag 0x0 [ 1334.802177][ T5909] kye 0003:0458:0138.0061: unknown main item tag 0x0 [ 1334.809080][ T5909] kye 0003:0458:0138.0061: unknown main item tag 0x0 [ 1334.815792][ T5909] kye 0003:0458:0138.0061: unknown main item tag 0x0 [ 1334.822632][ T5909] kye 0003:0458:0138.0061: unknown main item tag 0x0 [ 1334.831772][T22676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.841565][T22676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.850160][ T5909] kye 0003:0458:0138.0061: unknown main item tag 0x0 [ 1334.856911][ T5909] kye 0003:0458:0138.0061: unknown main item tag 0x0 [ 1334.864420][ T5909] kye 0003:0458:0138.0061: unknown main item tag 0x0 [ 1334.864861][ T5902] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1334.871577][ T5909] kye 0003:0458:0138.0061: unknown main item tag 0x0 [ 1334.878931][ T5902] pwc: recv_control_msg error -32 req 02 val 2700 [ 1334.885111][T22325] dvb-usb: bulk message failed: -22 (1/0) [ 1334.893413][ T5902] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1334.898421][ T5909] kye 0003:0458:0138.0061: unexpected long global item [ 1334.904729][ T5902] pwc: recv_control_msg error -32 req 04 val 1000 [ 1334.911765][ T5909] kye 0003:0458:0138.0061: parse failed [ 1334.918946][ T5902] pwc: recv_control_msg error -32 req 04 val 1300 [ 1334.923046][ T5909] kye 0003:0458:0138.0061: probe with driver kye failed with error -22 [ 1334.930762][ T5902] pwc: recv_control_msg error -32 req 04 val 1400 [ 1334.945426][ T5902] pwc: recv_control_msg error -32 req 02 val 2000 [ 1334.954798][ T5902] pwc: recv_control_msg error -32 req 02 val 2100 [ 1334.967949][T22325] usb 5-1: USB disconnect, device number 113 [ 1335.019789][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 1335.055499][ T5831] usb 3-1: USB disconnect, device number 89 [ 1335.137819][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 1335.165531][ T5902] pwc: recv_control_msg error -32 req 02 val 2500 [ 1335.177306][ T5902] pwc: recv_control_msg error -32 req 02 val 2400 [ 1335.195959][ T5902] pwc: recv_control_msg error -71 req 02 val 2600 [ 1335.203242][ T5902] pwc: recv_control_msg error -71 req 02 val 2900 [ 1335.218466][ T5902] pwc: recv_control_msg error -71 req 02 val 2800 [ 1335.226038][ T5902] pwc: recv_control_msg error -71 req 04 val 1100 [ 1335.233833][ T5902] pwc: recv_control_msg error -71 req 04 val 1200 [ 1335.242271][ T5902] pwc: Registered as video103. [ 1335.249695][ T5902] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input119 [ 1335.250658][T22325] dvb-usb: bulk message failed: -22 (1/0) [ 1335.267253][ T5902] usb 4-1: USB disconnect, device number 110 [ 1335.408557][T22325] dvb-usb: bulk message failed: -22 (1/0) [ 1335.519559][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 1335.681538][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 1335.808391][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 1335.909519][T22701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1336.146386][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 1336.405312][T22705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4714'. [ 1336.414823][T22705] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1336.436337][T22325] dvb-usb: bulk message failed: -22 (1/0) [ 1336.556882][ T5902] usb 1-1: USB disconnect, device number 120 [ 1336.567864][T22325] dvb-usb: bulk message failed: -22 (1/0) [ 1336.936676][T22325] usb 2-1: USB disconnect, device number 71 [ 1337.167937][ T5902] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1339.080451][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1339.080468][ T30] audit: type=1326 audit(1762969242.307:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22723 comm="syz.0.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce78f6c9 code=0x7ffc0000 [ 1339.492876][ T30] audit: type=1326 audit(1762969242.307:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22723 comm="syz.0.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce78f6c9 code=0x7ffc0000 [ 1339.617746][T22325] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 1339.908193][ T30] audit: type=1326 audit(1762969242.307:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22723 comm="syz.0.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f88ce78f6c9 code=0x7ffc0000 [ 1339.966479][ T30] audit: type=1326 audit(1762969242.307:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22723 comm="syz.0.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce78f6c9 code=0x7ffc0000 [ 1340.008432][ T30] audit: type=1326 audit(1762969242.307:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22723 comm="syz.0.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce78f6c9 code=0x7ffc0000 [ 1340.065884][ T30] audit: type=1326 audit(1762969242.307:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22723 comm="syz.0.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f88ce78f6c9 code=0x7ffc0000 [ 1340.133894][T22325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1340.151987][ T30] audit: type=1326 audit(1762969242.307:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22723 comm="syz.0.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce78f6c9 code=0x7ffc0000 [ 1340.200085][T22325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1340.243184][T22325] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1340.282611][ T30] audit: type=1326 audit(1762969242.307:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22723 comm="syz.0.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce78f6c9 code=0x7ffc0000 [ 1340.287679][T22325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.416215][T22325] usb 2-1: config 0 descriptor?? [ 1340.441723][ T30] audit: type=1326 audit(1762969242.307:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22723 comm="syz.0.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f88ce78f6c9 code=0x7ffc0000 [ 1340.535205][ T30] audit: type=1326 audit(1762969242.307:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22723 comm="syz.0.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce78f6c9 code=0x7ffc0000 [ 1340.727760][ T1220] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1340.910175][ T1220] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.924091][T22325] steelseries 0003:1038:1410.0062: unbalanced collection at end of report description [ 1340.937272][ T1220] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1340.947123][T22325] steelseries 0003:1038:1410.0062: parse failed [ 1340.958371][T22325] steelseries 0003:1038:1410.0062: probe with driver steelseries failed with error -22 [ 1340.969160][ T1220] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1340.982139][ T1220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1340.991124][ T1220] usb 3-1: SerialNumber: syz [ 1341.027988][ T5902] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1341.147896][ T5831] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 1341.189684][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 1341.197484][ T5902] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1341.210650][ T5902] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1341.217730][ T1220] usb 3-1: skipping empty audio interface (v1) [ 1341.217749][ T5902] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 1341.238655][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.252128][ T5902] usb 1-1: config 0 descriptor?? [ 1341.255379][ T1220] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1341.287104][ T1220] usb 3-1: USB disconnect, device number 90 [ 1341.320202][ T5831] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 1341.321080][ T6275] udevd[6275]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1341.331985][ T5831] usb 5-1: config 0 has no interface number 0 [ 1341.374676][ T5831] usb 5-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 1341.391948][ T5831] usb 5-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 1341.392003][ T5831] usb 5-1: config 0 interface 49 has no altsetting 0 [ 1341.394810][ T5831] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1341.424544][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.434267][ T5831] usb 5-1: Product: syz [ 1341.439070][ T5831] usb 5-1: Manufacturer: syz [ 1341.443714][ T5831] usb 5-1: SerialNumber: syz [ 1341.452050][ T5831] usb 5-1: config 0 descriptor?? [ 1341.698621][T22325] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1341.916537][T22325] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1341.929135][T22325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.937212][T22325] usb 4-1: Product: syz [ 1341.941878][T22325] usb 4-1: Manufacturer: syz [ 1341.951308][T22325] usb 4-1: SerialNumber: syz [ 1342.071788][T22753] dvmrp8: entered allmulticast mode [ 1342.081840][T22753] dvmrp8: left allmulticast mode [ 1342.235288][ T1220] usb 2-1: USB disconnect, device number 72 [ 1342.263026][T22753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.312252][T22753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.343482][ T5902] usbhid 1-1:0.0: can't add hid device: -71 [ 1342.349909][ T5902] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1342.365018][ T5902] usb 1-1: USB disconnect, device number 121 [ 1342.383200][T22325] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1342.407109][T22760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.425369][T22325] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1342.428395][T22760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.486897][T22771] netlink: 'syz.1.4735': attribute type 6 has an invalid length. [ 1342.500956][T22771] netlink: 'syz.1.4735': attribute type 6 has an invalid length. [ 1342.632624][T22773] Failed to get privilege flags for destination (handle=0x2:0x25) [ 1342.724263][T22775] FAULT_INJECTION: forcing a failure. [ 1342.724263][T22775] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.751553][T22775] CPU: 0 UID: 0 PID: 22775 Comm: syz.1.4737 Not tainted syzkaller #0 PREEMPT(full) [ 1342.751577][T22775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1342.751588][T22775] Call Trace: [ 1342.751596][T22775] [ 1342.751604][T22775] dump_stack_lvl+0x189/0x250 [ 1342.751641][T22775] ? __pfx____ratelimit+0x10/0x10 [ 1342.751672][T22775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1342.751693][T22775] ? __pfx__printk+0x10/0x10 [ 1342.751720][T22775] should_fail_ex+0x414/0x560 [ 1342.751751][T22775] should_failslab+0xa8/0x100 [ 1342.751771][T22775] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1342.751795][T22775] ? skb_clone+0x212/0x3a0 [ 1342.751819][T22775] skb_clone+0x212/0x3a0 [ 1342.751842][T22775] __netlink_deliver_tap+0x404/0x850 [ 1342.751872][T22775] ? netlink_deliver_tap+0x2e/0x1b0 [ 1342.751891][T22775] netlink_deliver_tap+0x19c/0x1b0 [ 1342.751908][T22775] netlink_sendskb+0x68/0x140 [ 1342.751935][T22775] netlink_unicast+0x397/0x9e0 [ 1342.751955][T22775] ? __asan_memcpy+0x40/0x70 [ 1342.751985][T22775] ? __pfx_netlink_unicast+0x10/0x10 [ 1342.752018][T22775] nfnetlink_rcv+0x2309/0x2590 [ 1342.752075][T22775] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1342.752114][T22775] ? ref_tracker_free+0x63a/0x7d0 [ 1342.752160][T22775] ? __netlink_deliver_tap+0x807/0x850 [ 1342.752176][T22775] ? netlink_deliver_tap+0x2e/0x1b0 [ 1342.752210][T22775] netlink_unicast+0x82f/0x9e0 [ 1342.752242][T22775] ? __pfx_netlink_unicast+0x10/0x10 [ 1342.752267][T22775] ? netlink_sendmsg+0x642/0xb30 [ 1342.752282][T22775] ? skb_put+0x11b/0x210 [ 1342.752302][T22775] netlink_sendmsg+0x805/0xb30 [ 1342.752329][T22775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1342.752350][T22775] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1342.752376][T22775] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1342.752395][T22775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1342.752412][T22775] __sock_sendmsg+0x21c/0x270 [ 1342.752439][T22775] ____sys_sendmsg+0x505/0x830 [ 1342.752463][T22775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1342.752490][T22775] ? import_iovec+0x74/0xa0 [ 1342.752520][T22775] ___sys_sendmsg+0x21f/0x2a0 [ 1342.752542][T22775] ? __pfx____sys_sendmsg+0x10/0x10 [ 1342.752602][T22775] ? __fget_files+0x2a/0x420 [ 1342.752618][T22775] ? __fget_files+0x3a0/0x420 [ 1342.752645][T22775] __x64_sys_sendmsg+0x19b/0x260 [ 1342.752675][T22775] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1342.752698][T22775] ? __pfx_ksys_write+0x10/0x10 [ 1342.752723][T22775] ? do_syscall_64+0xbe/0xfa0 [ 1342.752748][T22775] do_syscall_64+0xfa/0xfa0 [ 1342.752771][T22775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.752793][T22775] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1342.752805][T22775] ? clear_bhb_loop+0x60/0xb0 [ 1342.752821][T22775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.752835][T22775] RIP: 0033:0x7f511a18f6c9 [ 1342.752848][T22775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1342.752860][T22775] RSP: 002b:00007f511af68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1342.752876][T22775] RAX: ffffffffffffffda RBX: 00007f511a3e5fa0 RCX: 00007f511a18f6c9 [ 1342.752887][T22775] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1342.752897][T22775] RBP: 00007f511af68090 R08: 0000000000000000 R09: 0000000000000000 [ 1342.752907][T22775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1342.752916][T22775] R13: 00007f511a3e6038 R14: 00007f511a3e5fa0 R15: 00007f511a50fa28 [ 1342.752939][T22775] [ 1343.807786][ T5888] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1343.962301][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 1343.969810][T22325] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1343.988520][ T5888] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1343.999855][ T5888] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1344.010456][ T5888] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1344.022424][ T5888] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1344.040371][ T5888] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1344.058330][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.205959][ T5831] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1344.221070][ T5831] gspca_stk1135: reg_w 0x2 err -71 [ 1344.228225][ T5831] gspca_stk1135: serial bus timeout: status=0x00 [ 1344.234741][ T5831] gspca_stk1135: Sensor write failed [ 1344.240766][ T5831] gspca_stk1135: serial bus timeout: status=0x00 [ 1344.247237][ T5831] gspca_stk1135: Sensor write failed [ 1344.254032][ T5831] gspca_stk1135: serial bus timeout: status=0x00 [ 1344.260898][ T5831] gspca_stk1135: Sensor read failed [ 1344.268432][ T5831] gspca_stk1135: serial bus timeout: status=0x00 [ 1344.274934][ T5831] gspca_stk1135: Sensor read failed [ 1344.280880][ T5831] gspca_stk1135: Detected sensor type unknown (0x0) [ 1344.287526][ T5831] gspca_stk1135: serial bus timeout: status=0x00 [ 1344.294268][ T5831] gspca_stk1135: Sensor read failed [ 1344.299693][ T5831] gspca_stk1135: serial bus timeout: status=0x00 [ 1344.325681][ T5888] usb 1-1: usb_control_msg returned -71 [ 1344.342491][ T5888] usbtmc 1-1:16.0: can't read capabilities [ 1344.364522][ T5831] gspca_stk1135: Sensor read failed [ 1344.377141][ T5888] usb 1-1: USB disconnect, device number 122 [ 1344.394463][T22325] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 1344.395448][ T5831] gspca_stk1135: serial bus timeout: status=0x00 [ 1344.414659][ T5831] gspca_stk1135: Sensor write failed [ 1344.444279][ T5831] gspca_stk1135: serial bus timeout: status=0x00 [ 1344.446256][T22325] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1344.464233][T22325] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1344.492274][T22799] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1344.553778][T22325] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1344.558400][ T5831] gspca_stk1135: Sensor write failed [ 1344.570252][T22325] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1344.601560][T22325] usb 4-1: USB disconnect, device number 111 [ 1344.646410][ T5831] stk1135 5-1:0.49: probe with driver stk1135 failed with error -71 [ 1344.670694][ T5831] usb 5-1: USB disconnect, device number 114 [ 1344.998457][T22812] netlink: 'syz.0.4746': attribute type 6 has an invalid length. [ 1345.039754][T22812] netlink: 'syz.0.4746': attribute type 6 has an invalid length. [ 1345.644738][ T1220] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1346.363217][ T1220] usb 4-1: Using ep0 maxpacket: 32 [ 1346.384486][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1346.438022][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1346.497768][ T1220] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1346.550070][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.581352][ T1220] usb 4-1: config 0 descriptor?? [ 1346.611238][ T1220] hub 4-1:0.0: USB hub found [ 1346.921611][ T1220] hub 4-1:0.0: 1 port detected [ 1347.564342][ T1220] hub 4-1:0.0: activate --> -90 [ 1347.981234][T22854] FAULT_INJECTION: forcing a failure. [ 1347.981234][T22854] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.008450][T22855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4756'. [ 1348.050429][T22854] CPU: 0 UID: 0 PID: 22854 Comm: syz.0.4757 Not tainted syzkaller #0 PREEMPT(full) [ 1348.050452][T22854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1348.050463][T22854] Call Trace: [ 1348.050470][T22854] [ 1348.050479][T22854] dump_stack_lvl+0x189/0x250 [ 1348.050509][T22854] ? __pfx____ratelimit+0x10/0x10 [ 1348.050530][T22854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1348.050552][T22854] ? __pfx__printk+0x10/0x10 [ 1348.050575][T22854] ? __pfx___might_resched+0x10/0x10 [ 1348.050593][T22854] ? fs_reclaim_acquire+0x7d/0x100 [ 1348.050614][T22854] should_fail_ex+0x414/0x560 [ 1348.050644][T22854] should_failslab+0xa8/0x100 [ 1348.050664][T22854] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1348.050684][T22854] ? vmx_vcpu_load_vmcs+0x439/0x6b0 [ 1348.050701][T22854] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 1348.050728][T22854] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 1348.050761][T22854] mmu_topup_memory_caches+0x21/0x170 [ 1348.050785][T22854] kvm_mmu_load+0x9d/0x2300 [ 1348.050808][T22854] ? __lock_acquire+0xab9/0xd20 [ 1348.050837][T22854] ? kvm_vcpu_pre_fault_memory+0x15b/0x460 [ 1348.050868][T22854] kvm_arch_vcpu_pre_fault_memory+0x3eb/0x4c0 [ 1348.050895][T22854] kvm_vcpu_pre_fault_memory+0x229/0x460 [ 1348.050922][T22854] ? kvm_vcpu_pre_fault_memory+0x15b/0x460 [ 1348.050950][T22854] kvm_vcpu_ioctl+0x7f1/0xe90 [ 1348.050979][T22854] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1348.051023][T22854] ? __fget_files+0x2a/0x420 [ 1348.051044][T22854] ? __fget_files+0x2a/0x420 [ 1348.051063][T22854] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1348.051082][T22854] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1348.051102][T22854] __se_sys_ioctl+0xfc/0x170 [ 1348.051126][T22854] do_syscall_64+0xfa/0xfa0 [ 1348.051146][T22854] ? lockdep_hardirqs_on+0x9c/0x150 [ 1348.051168][T22854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.051184][T22854] ? clear_bhb_loop+0x60/0xb0 [ 1348.051203][T22854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.051219][T22854] RIP: 0033:0x7f88ce78f6c9 [ 1348.051233][T22854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1348.051247][T22854] RSP: 002b:00007f88cf681038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1348.051265][T22854] RAX: ffffffffffffffda RBX: 00007f88ce9e6090 RCX: 00007f88ce78f6c9 [ 1348.051278][T22854] RDX: 00002000000000c0 RSI: 00000000c040aed5 RDI: 0000000000000005 [ 1348.051290][T22854] RBP: 00007f88cf681090 R08: 0000000000000000 R09: 0000000000000000 [ 1348.051301][T22854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1348.051312][T22854] R13: 00007f88ce9e6128 R14: 00007f88ce9e6090 R15: 00007f88ceb0fa28 [ 1348.051348][T22854] [ 1348.533018][T22822] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4747'. [ 1348.542040][ T5895] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1348.599235][ T1220] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1348.599557][ T5831] usb 4-1: USB disconnect, device number 112 [ 1348.606573][ T1220] usb 4-1-port1: attempt power cycle [ 1348.697737][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 1348.705119][ T5895] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1348.724713][ T5895] usb 3-1: config 120 has an invalid interface number: 243 but max is 0 [ 1348.736701][ T5895] usb 3-1: config 120 has no interface number 0 [ 1348.753852][ T5895] usb 3-1: config 120 interface 243 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 16 [ 1348.767174][ T5895] usb 3-1: config 120 interface 243 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1348.789970][ T5895] usb 3-1: New USB device found, idVendor=2304, idProduct=0243, bcdDevice=66.1c [ 1348.799580][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.807869][ T5888] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1348.808220][ T5895] usb 3-1: Product: syz [ 1348.825777][ T5895] usb 3-1: Manufacturer: syz [ 1348.835939][ T5895] usb 3-1: SerialNumber: syz [ 1348.856604][T22851] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1348.864358][T22851] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1348.957835][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 1348.989310][T14993] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1348.999394][ T5888] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1349.011385][ T5888] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1349.023808][ T5888] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1349.035033][ T5888] usb 5-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 1349.044664][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.065388][ T5888] usb 5-1: config 0 descriptor?? [ 1349.144065][ T5895] dvb-usb: found a 'Pinnacle PCTV 73A' in cold state, will try to load a firmware [ 1349.157811][T14993] usb 1-1: Using ep0 maxpacket: 32 [ 1349.164623][T14993] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1349.174233][T14993] usb 1-1: config 0 has no interface number 0 [ 1349.180510][T14993] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1349.196118][T14993] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1349.196495][ T5895] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1349.205953][T14993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.214337][ T5895] dib0700: firmware download failed at 7 with -71 [ 1349.221880][T14993] usb 1-1: Product: syz [ 1349.233602][T14993] usb 1-1: Manufacturer: syz [ 1349.238506][T14993] usb 1-1: SerialNumber: syz [ 1349.252775][ T5895] usb 3-1: USB disconnect, device number 91 [ 1349.257793][T14993] usb 1-1: config 0 descriptor?? [ 1349.270710][T22863] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1349.357778][ T5831] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1349.483521][T22863] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1349.513099][ T5831] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.524363][ T5831] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1349.534022][ T5831] usb 2-1: New USB device strings: Mfr=154, Product=0, SerialNumber=0 [ 1349.542672][ T5831] usb 2-1: Manufacturer: syz [ 1349.559375][ T5831] usb 2-1: config 0 descriptor?? [ 1349.695132][T14993] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1349.706268][T14993] asix 1-1:0.188: probe with driver asix failed with error -32 [ 1350.198981][T22874] netlink: 'syz.1.4762': attribute type 10 has an invalid length. [ 1351.771119][T14993] usb 1-1: USB disconnect, device number 123 [ 1352.453723][T22872] delete_channel: no stack [ 1352.459499][T14993] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1352.501372][ T5831] usb 2-1: bad CDC descriptors [ 1352.511955][ T5831] usb 2-1: USB disconnect, device number 73 [ 1352.671197][T14993] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.767258][T14993] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1352.800397][T14993] usb 1-1: New USB device strings: Mfr=154, Product=0, SerialNumber=0 [ 1352.828058][T14993] usb 1-1: Manufacturer: syz [ 1352.839138][T14993] usb 1-1: config 0 descriptor?? [ 1353.368003][ T5831] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1353.435910][T22903] netlink: 'syz.0.4766': attribute type 10 has an invalid length. [ 1353.882441][ T5831] usb 2-1: device descriptor read/64, error -71 [ 1354.227767][ T5831] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1354.380514][ T5831] usb 2-1: device descriptor read/64, error -71 [ 1354.517947][ T5831] usb usb2-port1: attempt power cycle [ 1354.548727][ T5888] usbhid 5-1:0.0: can't add hid device: -32 [ 1354.554841][ T5888] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1354.753705][T22910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1354.891892][ T5831] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1354.968796][ T5831] usb 2-1: device descriptor read/8, error -71 [ 1355.247925][ T5831] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1355.275696][ T5831] usb 2-1: device descriptor read/8, error -71 [ 1355.347931][ T1220] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1355.403340][ T5831] usb usb2-port1: unable to enumerate USB device [ 1355.590382][ T1220] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.617712][ T1220] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1355.672297][ T1220] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1355.708088][ T1220] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1355.723197][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.762373][ T1220] usb 3-1: Product: syz [ 1355.767026][ T1220] usb 3-1: Manufacturer: syz [ 1355.808184][ T1220] usb 3-1: SerialNumber: syz [ 1356.049141][T22902] delete_channel: no stack [ 1356.062764][ T1220] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1356.084189][T14993] usb 1-1: bad CDC descriptors [ 1356.097834][ T1220] uvcvideo 3-1:220.0: No valid video chain found. [ 1356.128040][ T1220] usb 3-1: USB disconnect, device number 92 [ 1356.129057][T14993] usb 1-1: USB disconnect, device number 124 [ 1356.370225][T22915] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4772'. [ 1356.396840][T22915] tipc: Enabling of bearer rejected, failed to enable media [ 1356.717760][ T1220] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1356.856797][T22929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4778'. [ 1356.899570][ T1220] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1356.918813][ T1220] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1356.977839][ T1220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1356.998474][ T1220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1357.012409][ T1220] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1357.171344][T14993] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1357.394932][ T1220] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1357.425603][ T1220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.437588][ T1220] usb 1-1: config 0 descriptor?? [ 1357.439583][T14993] usb 2-1: config 1 has an invalid descriptor of length 238, skipping remainder of the config [ 1357.443812][T22921] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1357.495167][T14993] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1357.521664][T14993] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1357.532378][T14993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1357.612839][T14993] usb 2-1: SerialNumber: syz [ 1357.902881][ T1220] plantronics 0003:047F:FFFF.0063: reserved main item tag 0xd [ 1357.962573][T14993] usb 2-1: 0:2 : does not exist [ 1357.980441][ T1220] plantronics 0003:047F:FFFF.0063: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1357.999194][T14993] usb 2-1: unit 255 not found! [ 1358.008003][ T5909] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1358.060015][T14993] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1358.100539][T14993] usb 2-1: 5:0: cannot get min/max values for control 18 (id 5) [ 1358.142721][T14993] usb 2-1: USB disconnect, device number 78 [ 1358.179698][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.209264][ T5909] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1358.223157][ T6275] udevd[6275]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1358.243783][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.264819][ T5909] usb 3-1: config 0 descriptor?? [ 1358.293943][ T5909] pwc: Askey VC010 type 2 USB webcam detected. [ 1358.434116][T14993] usb 5-1: USB disconnect, device number 115 [ 1358.468190][ T5902] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 1358.629964][ T5902] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 1358.638380][ T5902] usb 4-1: config 0 has no interface number 0 [ 1358.644528][ T5902] usb 4-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 1358.656701][ T5902] usb 4-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 1358.671677][ T5902] usb 4-1: config 0 interface 49 has no altsetting 0 [ 1358.681518][ T5902] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1358.690699][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.698486][T22940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.700034][ T5902] usb 4-1: Product: syz [ 1358.712913][ T5902] usb 4-1: Manufacturer: syz [ 1358.717533][ T5902] usb 4-1: SerialNumber: syz [ 1358.723913][T22940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.734107][ T5902] usb 4-1: config 0 descriptor?? [ 1358.737822][ T5909] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1358.750133][ T5909] pwc: recv_control_msg error -32 req 02 val 2700 [ 1358.754192][ T5831] usb 1-1: USB disconnect, device number 125 [ 1358.765392][ T5909] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1358.776054][ T5909] pwc: recv_control_msg error -32 req 04 val 1000 [ 1358.793018][ T1220] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1358.797813][T14993] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1358.801134][ T5909] pwc: recv_control_msg error -32 req 04 val 1300 [ 1358.822487][ T5909] pwc: recv_control_msg error -32 req 04 val 1400 [ 1358.833356][ T5909] pwc: recv_control_msg error -32 req 02 val 2000 [ 1358.845728][ T5909] pwc: recv_control_msg error -32 req 02 val 2100 [ 1358.967822][T14993] usb 5-1: Using ep0 maxpacket: 16 [ 1358.975598][T14993] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 1358.977716][ T1220] usb 2-1: Using ep0 maxpacket: 32 [ 1358.987250][T14993] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1358.995226][ T1220] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1358.999993][T14993] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1359.007144][ T1220] usb 2-1: config 0 has no interface number 0 [ 1359.025814][ T1220] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1359.026046][T14993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.099720][ T1220] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1359.100642][T14993] usb 5-1: config 0 descriptor?? [ 1359.109731][ T5909] pwc: recv_control_msg error -32 req 02 val 2500 [ 1359.122175][ T1220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.133827][ T5909] pwc: recv_control_msg error -32 req 02 val 2400 [ 1359.142827][ T5909] pwc: recv_control_msg error -71 req 02 val 2600 [ 1359.156361][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1359.156378][ T30] audit: type=1326 audit(1762969262.417:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22948 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce78f6c9 code=0x7fc00000 [ 1359.189516][ T1220] usb 2-1: Product: syz [ 1359.195716][ T1220] usb 2-1: Manufacturer: syz [ 1359.200995][ T5909] pwc: recv_control_msg error -71 req 02 val 2900 [ 1359.207945][ T1220] usb 2-1: SerialNumber: syz [ 1359.215712][ T5909] pwc: recv_control_msg error -71 req 02 val 2800 [ 1359.224885][ T1220] usb 2-1: config 0 descriptor?? [ 1359.231281][T22947] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1359.266187][ T5909] pwc: recv_control_msg error -71 req 04 val 1100 [ 1359.281566][ T5909] pwc: recv_control_msg error -71 req 04 val 1200 [ 1359.320350][ T5909] pwc: Registered as video103. [ 1359.362048][ T5909] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input121 [ 1359.410572][ T5909] usb 3-1: USB disconnect, device number 93 [ 1359.464023][T22947] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1359.636404][T14993] nzxt-smart2 0003:1E71:2009.0064: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1359.671352][ T30] audit: type=1326 audit(1762969262.937:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22948 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f88ce78f6c9 code=0x7fc00000 [ 1359.702173][ T30] audit: type=1326 audit(1762969262.937:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22948 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce78f6c9 code=0x7fc00000 [ 1359.764632][ T30] audit: type=1326 audit(1762969262.937:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22948 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce78f6c9 code=0x7fc00000 [ 1359.787291][ T30] audit: type=1326 audit(1762969262.937:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22948 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce78f6c9 code=0x7fc00000 [ 1359.820009][ T30] audit: type=1326 audit(1762969262.937:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22948 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce78f6c9 code=0x7fc00000 [ 1359.877403][ T30] audit: type=1326 audit(1762969262.937:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22948 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce78f6c9 code=0x7fc00000 [ 1359.912445][ T30] audit: type=1326 audit(1762969262.937:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22948 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce78f6c9 code=0x7fc00000 [ 1359.946998][ T30] audit: type=1326 audit(1762969262.937:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22948 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce78f6c9 code=0x7fc00000 [ 1360.031675][ T30] audit: type=1326 audit(1762969262.937:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22948 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce78f6c9 code=0x7fc00000 [ 1360.298204][ T5909] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1360.302499][ T1220] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1360.351930][ T1220] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1360.409688][ T1220] asix 2-1:0.188: probe with driver asix failed with error -61 [ 1360.572011][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 25974, setting to 64 [ 1360.587447][ T5909] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1360.597161][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.605546][ T5909] usb 3-1: Product: syz [ 1360.610165][ T5909] usb 3-1: Manufacturer: syz [ 1360.614900][ T5909] usb 3-1: SerialNumber: syz [ 1360.622732][ T5909] usb 3-1: config 0 descriptor?? [ 1360.800573][ T5831] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1360.960803][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 1360.981280][ T5831] usb 1-1: config 127 has an invalid interface number: 171 but max is 1 [ 1360.993436][ T5831] usb 1-1: config 127 has no interface number 1 [ 1361.003842][ T5831] usb 1-1: config 127 interface 171 has no altsetting 0 [ 1361.119658][ T5831] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1361.154544][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.167811][ T5831] usb 1-1: Product: syz [ 1361.201862][ T5831] usb 1-1: Manufacturer: syz [ 1361.242297][ T5831] usb 1-1: SerialNumber: syz [ 1361.608174][ T5938] usb 2-1: USB disconnect, device number 79 [ 1361.659166][T22972] fuse: Bad value for 'fd' [ 1361.671998][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.684245][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.024619][ T5902] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1362.032533][ T5902] gspca_stk1135: reg_w 0x2 err -71 [ 1362.039046][ T5902] gspca_stk1135: serial bus timeout: status=0x00 [ 1362.058918][ T5902] gspca_stk1135: Sensor write failed [ 1362.091190][ T5902] gspca_stk1135: serial bus timeout: status=0x00 [ 1362.103000][ T5902] gspca_stk1135: Sensor write failed [ 1362.113424][ T5902] gspca_stk1135: serial bus timeout: status=0x00 [ 1362.128614][ T5902] gspca_stk1135: Sensor read failed [ 1362.143576][ T5902] gspca_stk1135: serial bus timeout: status=0x00 [ 1362.160788][ T5902] gspca_stk1135: Sensor read failed [ 1362.171990][ T5902] gspca_stk1135: Detected sensor type unknown (0x0) [ 1362.190453][ T5902] gspca_stk1135: serial bus timeout: status=0x00 [ 1362.222342][ T5902] gspca_stk1135: Sensor read failed [ 1362.245129][ T5902] gspca_stk1135: serial bus timeout: status=0x00 [ 1362.292657][ T5902] gspca_stk1135: Sensor read failed [ 1362.302282][ T5902] gspca_stk1135: serial bus timeout: status=0x00 [ 1362.334809][ T5902] gspca_stk1135: Sensor write failed [ 1362.379873][ T5902] gspca_stk1135: serial bus timeout: status=0x00 [ 1362.709568][ T5902] gspca_stk1135: Sensor write failed [ 1362.771212][ T5902] stk1135 4-1:0.49: probe with driver stk1135 failed with error -71 [ 1362.796701][T22325] usb 5-1: USB disconnect, device number 116 [ 1362.802175][ T5902] usb 4-1: USB disconnect, device number 117 [ 1363.040753][T22981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4790'. [ 1363.287718][ T5902] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1363.339071][T22325] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1363.418576][ T5831] xr_serial 1-1:127.171: xr_serial converter detected [ 1363.446122][ T5831] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1363.461023][ T5831] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1363.472581][T22987] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1363.473390][ T5902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.496067][ T5831] usb 1-1: USB disconnect, device number 126 [ 1363.502234][ T5902] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1363.509606][T22985] dns_resolver: Unsupported server list version (0) [ 1363.513801][T22987] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1363.519476][ T5831] xr_serial 1-1:127.171: device disconnected [ 1363.525585][T22325] usb 5-1: Using ep0 maxpacket: 32 [ 1363.545580][ T5902] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1363.555735][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.571118][ T5902] usb 4-1: Product: syz [ 1363.578400][ T5902] usb 4-1: Manufacturer: syz [ 1363.582359][T22325] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1363.583008][ T5902] usb 4-1: SerialNumber: syz [ 1363.585634][ T5902] usb 4-1: config 0 descriptor?? [ 1363.611399][ T5902] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1363.623074][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1363.697049][ T5902] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1363.777870][T22325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.988742][ T5902] usb 4-1: media controller created [ 1364.000706][T22325] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1364.081412][ T5938] usb 3-1: USB disconnect, device number 94 [ 1364.115903][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1364.251733][ T5902] DVB: Unable to find symbol tda10046_attach() [ 1364.262397][ T5902] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1364.278137][ T5902] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1364.410060][T22325] gspca_nw80x: reg_r err -71 [ 1364.414766][T22325] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 1364.427425][T22325] usb 5-1: USB disconnect, device number 117 [ 1364.477757][ T1220] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1364.852843][ T5902] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1364.876436][ T5902] usb 4-1: USB disconnect, device number 118 [ 1365.378559][ T1220] usb 1-1: Using ep0 maxpacket: 32 [ 1365.386027][ T1220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1365.417835][ T1220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1365.434333][ T1220] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1365.448935][ T1220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.476853][ T1220] usb 1-1: config 0 descriptor?? [ 1365.493178][ T1220] hub 1-1:0.0: USB hub found [ 1365.652749][T23003] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1365.672689][T23004] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1365.694163][ T1220] hub 1-1:0.0: 1 port detected [ 1365.710889][T23003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4796'. [ 1365.711608][T23004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4796'. [ 1365.981270][ T5902] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1366.037808][ T5938] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1366.227930][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 1366.256563][ T5902] usb 2-1: config 0 has no interfaces? [ 1366.262200][ T5902] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1366.271345][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.280991][ T5902] usb 2-1: config 0 descriptor?? [ 1366.342984][ T5938] usb 5-1: Using ep0 maxpacket: 32 [ 1366.542811][ T5938] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1366.551251][ T5938] usb 5-1: config 0 has no interface number 0 [ 1366.557328][ T5938] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1366.600150][ T5938] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1366.638831][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.646821][ T5938] usb 5-1: Product: syz [ 1367.028286][ T1220] hub 1-1:0.0: activate --> -90 [ 1367.044918][ T5909] usb 2-1: USB disconnect, device number 80 [ 1367.050953][ T5938] usb 5-1: Manufacturer: syz [ 1367.105575][ T5938] usb 5-1: SerialNumber: syz [ 1367.170133][ T5938] usb 5-1: config 0 descriptor?? [ 1367.184906][T23014] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1367.641999][T23014] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1367.677574][ T1220] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 1367.686775][ T1220] usb 1-1: USB disconnect, device number 127 [ 1367.693093][ T5909] usb 1-1: Failed to suspend device, error -19 [ 1368.417762][ T1220] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1368.637891][ T1220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.649811][ T1220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1368.679071][ T1220] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1368.714967][ T1220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.753440][ T1220] usb 1-1: config 0 descriptor?? [ 1368.799702][ T5938] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1368.838058][ T5938] asix 5-1:0.188: probe with driver asix failed with error -32 [ 1369.182012][ T1220] hid_parser_main: 74 callbacks suppressed [ 1369.182026][ T1220] cp2112 0003:10C4:EA90.0065: unknown main item tag 0x0 [ 1369.265072][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1369.265090][ T30] audit: type=1326 audit(1762969272.487:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23043 comm="syz.2.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1ad8f6c9 code=0x7ffc0000 [ 1369.387157][ T1220] cp2112 0003:10C4:EA90.0065: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1369.458507][ T1220] cp2112 0003:10C4:EA90.0065: error requesting version [ 1369.466905][ T1220] cp2112 0003:10C4:EA90.0065: probe with driver cp2112 failed with error -32 [ 1369.745317][ T30] audit: type=1326 audit(1762969272.487:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23043 comm="syz.2.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1ad8f6c9 code=0x7ffc0000 [ 1369.841030][ T30] audit: type=1326 audit(1762969272.487:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23043 comm="syz.2.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3e1ad8f6c9 code=0x7ffc0000 [ 1369.862689][T22325] usb 5-1: USB disconnect, device number 118 [ 1369.926334][ T30] audit: type=1326 audit(1762969272.487:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23043 comm="syz.2.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1ad8f6c9 code=0x7ffc0000 [ 1369.985412][ T30] audit: type=1326 audit(1762969272.487:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23043 comm="syz.2.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3e1ad8f6c9 code=0x7ffc0000 [ 1370.071566][ T30] audit: type=1326 audit(1762969272.487:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23043 comm="syz.2.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1ad8f6c9 code=0x7ffc0000 [ 1370.135933][ T30] audit: type=1326 audit(1762969272.487:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23043 comm="syz.2.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3e1ad8f6c9 code=0x7ffc0000 [ 1370.166845][T23056] i2c i2c-1: Invalid block write size 42 [ 1370.208027][ T30] audit: type=1326 audit(1762969272.487:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23043 comm="syz.2.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1ad8f6c9 code=0x7ffc0000 [ 1370.230954][ T30] audit: type=1326 audit(1762969272.487:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23043 comm="syz.2.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1ad8f6c9 code=0x7ffc0000 [ 1370.253555][ T30] audit: type=1326 audit(1762969272.487:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23043 comm="syz.2.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e1ad8f6c9 code=0x7ffc0000 [ 1370.288148][T23058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.296984][T23058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.365201][T23059] Failed to get privilege flags for destination (handle=0x2:0x25) [ 1370.569972][T23064] FAULT_INJECTION: forcing a failure. [ 1370.569972][T23064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1370.617375][T23064] CPU: 1 UID: 0 PID: 23064 Comm: syz.3.4810 Not tainted syzkaller #0 PREEMPT(full) [ 1370.617401][T23064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1370.617413][T23064] Call Trace: [ 1370.617421][T23064] [ 1370.617430][T23064] dump_stack_lvl+0x189/0x250 [ 1370.617457][T23064] ? __pfx____ratelimit+0x10/0x10 [ 1370.617485][T23064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1370.617507][T23064] ? __pfx__printk+0x10/0x10 [ 1370.617538][T23064] should_fail_ex+0x414/0x560 [ 1370.617568][T23064] _copy_to_user+0x31/0xb0 [ 1370.617592][T23064] simple_read_from_buffer+0xe1/0x170 [ 1370.617621][T23064] proc_fail_nth_read+0x1b3/0x220 [ 1370.617647][T23064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1370.617669][T23064] ? rw_verify_area+0x2a6/0x4d0 [ 1370.617692][T23064] ? __lock_acquire+0xab9/0xd20 [ 1370.617711][T23064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1370.617732][T23064] vfs_read+0x200/0xa30 [ 1370.617754][T23064] ? fdget_pos+0x247/0x320 [ 1370.617775][T23064] ? __pfx___mutex_lock+0x10/0x10 [ 1370.617799][T23064] ? __pfx_vfs_read+0x10/0x10 [ 1370.617823][T23064] ? __fget_files+0x2a/0x420 [ 1370.617843][T23064] ? __fget_files+0x3a0/0x420 [ 1370.617857][T23064] ? __fget_files+0x2a/0x420 [ 1370.617880][T23064] ksys_read+0x145/0x250 [ 1370.617903][T23064] ? __pfx_ksys_read+0x10/0x10 [ 1370.617929][T23064] ? do_syscall_64+0xbe/0xfa0 [ 1370.617963][T23064] do_syscall_64+0xfa/0xfa0 [ 1370.617985][T23064] ? lockdep_hardirqs_on+0x9c/0x150 [ 1370.618008][T23064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.618026][T23064] ? clear_bhb_loop+0x60/0xb0 [ 1370.618048][T23064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.618065][T23064] RIP: 0033:0x7fb77f98e0dc [ 1370.618082][T23064] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1370.618098][T23064] RSP: 002b:00007fb780824030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1370.618118][T23064] RAX: ffffffffffffffda RBX: 00007fb77fbe5fa0 RCX: 00007fb77f98e0dc [ 1370.618131][T23064] RDX: 000000000000000f RSI: 00007fb7808240a0 RDI: 0000000000000004 [ 1370.618143][T23064] RBP: 00007fb780824090 R08: 0000000000000000 R09: 0000000000000000 [ 1370.618155][T23064] R10: 0000000000000083 R11: 0000000000000246 R12: 0000000000000001 [ 1370.618166][T23064] R13: 00007fb77fbe6038 R14: 00007fb77fbe5fa0 R15: 00007fb77fd0fa28 [ 1370.618197][T23064] [ 1371.177616][T23071] FAULT_INJECTION: forcing a failure. [ 1371.177616][T23071] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.191250][T23071] CPU: 1 UID: 0 PID: 23071 Comm: syz.2.4812 Not tainted syzkaller #0 PREEMPT(full) [ 1371.191275][T23071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1371.191286][T23071] Call Trace: [ 1371.191294][T23071] [ 1371.191317][T23071] dump_stack_lvl+0x189/0x250 [ 1371.191344][T23071] ? __pfx____ratelimit+0x10/0x10 [ 1371.191367][T23071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1371.191388][T23071] ? __pfx__printk+0x10/0x10 [ 1371.191402][T23071] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1371.191424][T23071] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1371.191442][T23071] should_fail_ex+0x414/0x560 [ 1371.191469][T23071] should_failslab+0xa8/0x100 [ 1371.191487][T23071] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1371.191507][T23071] ? raw6_local_deliver+0x15d/0xad0 [ 1371.191522][T23071] ? skb_clone+0x212/0x3a0 [ 1371.191541][T23071] skb_clone+0x212/0x3a0 [ 1371.191555][T23071] ? raw6_local_deliver+0x6f4/0xad0 [ 1371.191571][T23071] raw6_local_deliver+0x701/0xad0 [ 1371.191593][T23071] ? raw6_local_deliver+0x15d/0xad0 [ 1371.191618][T23071] ? __pfx_raw6_local_deliver+0x10/0x10 [ 1371.191642][T23071] ip6_protocol_deliver_rcu+0x3aa/0x15c0 [ 1371.191682][T23071] ip6_input_finish+0x191/0x370 [ 1371.191701][T23071] NF_HOOK+0x30c/0x3a0 [ 1371.191716][T23071] ? __pfx_ip6_input_finish+0x10/0x10 [ 1371.191730][T23071] ? NF_HOOK+0x9a/0x3a0 [ 1371.191746][T23071] ? __pfx_NF_HOOK+0x10/0x10 [ 1371.191765][T23071] ? __pfx_ip6_input_finish+0x10/0x10 [ 1371.191792][T23071] ip6_input+0x16a/0x270 [ 1371.191806][T23071] ? ip6_input+0x23/0x270 [ 1371.191823][T23071] ip6_mc_input+0x655/0xb70 [ 1371.191843][T23071] ? __pfx_ip6_mc_input+0x10/0x10 [ 1371.191858][T23071] ? skb_dst+0x71/0xd0 [ 1371.191875][T23071] ? ip6_rcv_finish+0x29e/0x2e0 [ 1371.191907][T23071] NF_HOOK+0x30c/0x3a0 [ 1371.191921][T23071] ? skb_orphan+0x4f/0xd0 [ 1371.191940][T23071] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1371.191963][T23071] ? NF_HOOK+0x9a/0x3a0 [ 1371.191978][T23071] ? __pfx_NF_HOOK+0x10/0x10 [ 1371.191997][T23071] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1371.192029][T23071] __netif_receive_skb+0xd3/0x380 [ 1371.192057][T23071] ? netif_receive_skb+0x115/0x790 [ 1371.192077][T23071] netif_receive_skb+0x1cb/0x790 [ 1371.192098][T23071] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1371.192117][T23071] ? __pfx_netif_receive_skb+0x10/0x10 [ 1371.192144][T23071] ? tun_rx_batched+0x160/0x730 [ 1371.192167][T23071] tun_rx_batched+0x1b9/0x730 [ 1371.192187][T23071] ? __lock_acquire+0xab9/0xd20 [ 1371.192210][T23071] ? __pfx_tun_rx_batched+0x10/0x10 [ 1371.192234][T23071] ? tun_get_user+0x272f/0x3e90 [ 1371.192264][T23071] tun_get_user+0x2b65/0x3e90 [ 1371.192290][T23071] ? tun_get_user+0x6f6/0x3e90 [ 1371.192312][T23071] ? tun_get_user+0x272f/0x3e90 [ 1371.192335][T23071] ? aa_file_perm+0x44d/0x1550 [ 1371.192353][T23071] ? __pfx_tun_get_user+0x10/0x10 [ 1371.192385][T23071] ? __lock_acquire+0xab9/0xd20 [ 1371.192409][T23071] ? ref_tracker_alloc+0x318/0x460 [ 1371.192425][T23071] ? __lock_acquire+0xab9/0xd20 [ 1371.192441][T23071] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1371.192471][T23071] ? tun_get+0x1c/0x2f0 [ 1371.192495][T23071] ? tun_get+0x1c/0x2f0 [ 1371.192514][T23071] ? tun_get+0x1c/0x2f0 [ 1371.192537][T23071] tun_chr_write_iter+0x113/0x200 [ 1371.192560][T23071] vfs_write+0x5c9/0xb30 [ 1371.192587][T23071] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1371.192605][T23071] ? __pfx_vfs_write+0x10/0x10 [ 1371.192636][T23071] ? __fget_files+0x2a/0x420 [ 1371.192661][T23071] ksys_write+0x145/0x250 [ 1371.192684][T23071] ? __pfx_ksys_write+0x10/0x10 [ 1371.192709][T23071] ? do_syscall_64+0xbe/0xfa0 [ 1371.192736][T23071] do_syscall_64+0xfa/0xfa0 [ 1371.192756][T23071] ? lockdep_hardirqs_on+0x9c/0x150 [ 1371.192779][T23071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.192798][T23071] ? clear_bhb_loop+0x60/0xb0 [ 1371.192819][T23071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.192836][T23071] RIP: 0033:0x7f3e1ad8e17f [ 1371.192853][T23071] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1371.192868][T23071] RSP: 002b:00007f3e1bbf1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1371.192893][T23071] RAX: ffffffffffffffda RBX: 00007f3e1afe6090 RCX: 00007f3e1ad8e17f [ 1371.192907][T23071] RDX: 0000000000000118 RSI: 0000200000000180 RDI: 00000000000000c8 [ 1371.192918][T23071] RBP: 00007f3e1bbf1090 R08: 0000000000000000 R09: 0000000000000000 [ 1371.192928][T23071] R10: 0000000000000118 R11: 0000000000000293 R12: 0000000000000001 [ 1371.192939][T23071] R13: 00007f3e1afe6128 R14: 00007f3e1afe6090 R15: 00007f3e1b10fa28 [ 1371.192972][T23071] [ 1371.686547][ T5831] usb 1-1: USB disconnect, device number 2 [ 1371.697748][ T1220] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1371.868617][ T1220] usb 4-1: Using ep0 maxpacket: 16 [ 1371.877755][ T1220] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1371.885988][ T1220] usb 4-1: config 0 has no interface number 0 [ 1371.892713][ T1220] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1372.037782][ T5831] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1372.039094][ T1220] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1372.086558][ T1220] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1372.121587][ T1220] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1372.137699][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.145720][ T1220] usb 4-1: Product: syz [ 1372.158503][ T1220] usb 4-1: Manufacturer: syz [ 1372.163137][ T1220] usb 4-1: SerialNumber: syz [ 1372.178192][ T5895] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1372.202245][ T1220] usb 4-1: config 0 descriptor?? [ 1372.203254][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.220671][T23067] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1372.257939][T23067] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1372.399290][ T5831] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1372.418441][ T5831] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1372.429780][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.457898][ T5831] usb 1-1: Product: syz [ 1372.462183][ T5831] usb 1-1: Manufacturer: syz [ 1372.466785][ T5831] usb 1-1: SerialNumber: syz [ 1372.477097][ T5831] usb 1-1: config 0 descriptor?? [ 1372.485974][ T5831] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1372.487809][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 1372.536297][ T5895] usb 5-1: config 0 has no interfaces? [ 1372.538394][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1372.541975][ T5895] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1372.581467][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.619252][ T5831] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1372.637793][ T5831] usb 1-1: media controller created [ 1372.638941][ T5895] usb 5-1: config 0 descriptor?? [ 1372.685363][ T1220] dm9601 4-1:0.41: probe with driver dm9601 failed with error -71 [ 1372.712923][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1372.717885][ T1220] sr9700 4-1:0.41: probe with driver sr9700 failed with error -71 [ 1372.813070][ T1220] usb 4-1: USB disconnect, device number 119 [ 1372.875469][ T5831] DVB: Unable to find symbol tda10046_attach() [ 1373.106269][ T5831] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1373.228213][T23097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1373.247183][ T5831] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1373.316071][ T5895] usb 5-1: USB disconnect, device number 119 [ 1373.489646][ T5831] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1373.514786][ T5831] usb 1-1: USB disconnect, device number 3 [ 1374.946311][T23110] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4821'. [ 1374.981587][T23111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4823'. [ 1375.627059][T23135] Failed to get privilege flags for destination (handle=0x2:0x25) [ 1375.687502][ T5831] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1375.767817][ T5895] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1375.917745][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 1375.929952][ T5895] usb 3-1: config 0 has no interfaces? [ 1375.942795][ T5895] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1375.957518][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.059810][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 1376.097913][ T5895] usb 3-1: config 0 descriptor?? [ 1376.118523][ T5831] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1376.153152][ T5831] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1376.182575][ T5831] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1376.214369][ T5831] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1376.257207][ T5831] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1376.284810][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.317949][T22325] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1376.567707][T22325] usb 4-1: Using ep0 maxpacket: 16 [ 1376.633218][ T5831] usb 1-1: GET_CAPABILITIES returned 0 [ 1376.638921][ T5831] usbtmc 1-1:16.0: can't read capabilities [ 1376.700979][T22325] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 1376.731395][T22325] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1376.790081][T22325] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1376.816569][T22325] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1376.835518][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.844599][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.853642][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.862682][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.871720][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.880766][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.889836][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.957726][T22325] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1376.977948][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.987030][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.996164][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1377.005213][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1377.014265][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1377.023322][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1377.032460][T22325] usb 4-1: config 0 has no interface number 0 [ 1377.040126][T22325] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1377.051179][T22325] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1377.060988][T22325] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1377.070811][T22325] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1377.083846][T22325] usb 4-1: config 0 interface 125 has no altsetting 0 [ 1377.098058][T22325] usb 4-1: config 0 interface 125 has no altsetting 2 [ 1377.119519][T22325] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1377.128651][T22325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.138100][T22325] usb 4-1: Product: syz [ 1377.152461][T22325] usb 4-1: Manufacturer: syz [ 1377.157078][T22325] usb 4-1: SerialNumber: syz [ 1377.168268][T22325] usb 4-1: config 0 descriptor?? [ 1377.184070][T22325] usb 4-1: selecting invalid altsetting 2 [ 1377.190655][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1377.199772][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1377.208867][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1377.220835][ T5895] usb 1-1: USB disconnect, device number 4 [ 1377.592462][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1377.592478][ T30] audit: type=1326 audit(1762969280.837:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23145 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511a18f6c9 code=0x7ffc0000 [ 1377.717159][ T30] audit: type=1326 audit(1762969280.837:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23145 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511a18f6c9 code=0x7ffc0000 [ 1377.818140][ T30] audit: type=1326 audit(1762969280.837:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23145 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f511a18f6c9 code=0x7ffc0000 [ 1377.844259][ T30] audit: type=1326 audit(1762969280.837:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23145 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511a18f6c9 code=0x7ffc0000 [ 1378.029096][ T30] audit: type=1326 audit(1762969280.837:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23145 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f511a18f6c9 code=0x7ffc0000 [ 1378.126634][ T30] audit: type=1326 audit(1762969280.837:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23145 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511a18f6c9 code=0x7ffc0000 [ 1378.229085][T22325] get_1284_register timeout [ 1378.239851][T22325] uss720 4-1:0.125: probe with driver uss720 failed with error -5 [ 1378.239931][ C0] usb 4-1: async_complete: urb error -104 [ 1378.253695][ C0] usb 4-1: async_complete: urb error -104 [ 1378.259509][ C0] usb 4-1: async_complete: urb error -104 [ 1378.267833][ T30] audit: type=1326 audit(1762969280.837:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23145 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f511a18f6c9 code=0x7ffc0000 [ 1378.364129][ T30] audit: type=1326 audit(1762969280.837:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23145 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511a18f6c9 code=0x7ffc0000 [ 1378.388089][ T30] audit: type=1326 audit(1762969280.837:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23145 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f511a18f6c9 code=0x7ffc0000 [ 1378.414996][ T30] audit: type=1326 audit(1762969280.837:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23145 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511a18f6c9 code=0x7ffc0000 [ 1378.530712][ T5938] usb 3-1: USB disconnect, device number 95 [ 1379.097871][ T5938] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 1379.264754][ T5938] usb 3-1: device descriptor read/64, error -71 [ 1379.887744][ T5938] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1380.108400][ T5938] usb 3-1: device descriptor read/64, error -71 [ 1380.277737][ T5831] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1380.287977][ T5938] usb usb3-port1: attempt power cycle [ 1380.548229][ T5831] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.567785][ T5831] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1380.572101][ T5895] usb 4-1: USB disconnect, device number 120 [ 1380.593789][ T5831] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1380.610595][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1380.637555][ T5831] usb 1-1: SerialNumber: syz [ 1380.657995][ T5938] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1380.729719][ T5938] usb 3-1: device descriptor read/8, error -71 [ 1380.890349][ T5831] usb 1-1: 0:2 : does not exist [ 1380.977855][ T5938] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1381.064404][ T5831] usb 1-1: unit 5 not found! [ 1381.088210][ T5938] usb 3-1: device descriptor read/8, error -71 [ 1381.158625][ T5831] usb 1-1: USB disconnect, device number 5 [ 1381.208265][ T5938] usb usb3-port1: unable to enumerate USB device [ 1381.537751][ T5938] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1381.743554][ T5938] usb 5-1: Using ep0 maxpacket: 8 [ 1381.766911][ T5938] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1381.778518][ T5938] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1381.933137][T23205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.940693][T23205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.953180][ T5938] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1381.963533][ T5938] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1382.009548][ T5938] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1382.021738][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.187893][ T5831] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1382.247746][ T5895] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1382.270396][ T5938] usb 5-1: GET_CAPABILITIES returned 0 [ 1382.275894][ T5938] usbtmc 5-1:16.0: can't read capabilities [ 1382.377733][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 1382.384688][ T5831] usb 1-1: config 0 has no interfaces? [ 1382.394163][ T5831] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1382.403928][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.417745][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 1382.418108][ T5831] usb 1-1: config 0 descriptor?? [ 1382.446212][ T5895] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 1382.471190][ T5895] usb 3-1: config 127 has no interface number 1 [ 1382.477820][ T5895] usb 3-1: config 127 interface 171 has no altsetting 0 [ 1382.493082][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.502219][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.511299][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.522239][ T5895] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1382.680283][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.689387][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.698510][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.707575][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.716724][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.725873][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.734947][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.796104][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.805114][ T5895] usb 3-1: Product: syz [ 1382.809912][ T5895] usb 3-1: Manufacturer: syz [ 1382.815032][ T5895] usb 3-1: SerialNumber: syz [ 1382.821681][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.830774][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.839831][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.848891][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.870264][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.879404][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.962417][ T1212] usb 5-1: USB disconnect, device number 120 [ 1383.435799][T22325] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1383.597772][T22325] usb 2-1: Using ep0 maxpacket: 16 [ 1383.604900][T22325] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.615315][T22325] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1383.693381][T22325] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1383.757550][T22325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.765923][T22325] usb 2-1: Product: syz [ 1383.770221][T22325] usb 2-1: Manufacturer: syz [ 1383.839543][T22325] usb 2-1: SerialNumber: syz [ 1383.977804][ T5831] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 1384.077244][T22325] usb 2-1: 0:2 : does not exist [ 1384.077816][ T5902] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1384.096760][T22325] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1384.126327][T22325] usb 2-1: USB disconnect, device number 81 [ 1384.130439][ T5831] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 1384.144027][ T5831] usb 4-1: config 0 has no interface number 0 [ 1384.234139][ T5831] usb 4-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 1384.252779][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1384.285485][ T5902] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1384.295042][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.316076][ T5902] usb 5-1: Product: syz [ 1384.325938][ T5902] usb 5-1: Manufacturer: syz [ 1384.341841][ T5831] usb 4-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 1384.360706][ T5902] usb 5-1: SerialNumber: syz [ 1384.368359][ T5831] usb 4-1: config 0 interface 49 has no altsetting 0 [ 1384.378319][ T5831] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1384.429297][ T5902] usb 5-1: config 0 descriptor?? [ 1384.435481][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.453849][ T5831] usb 4-1: Product: syz [ 1384.458260][ T5831] usb 4-1: Manufacturer: syz [ 1384.470053][ T5831] usb 4-1: SerialNumber: syz [ 1384.502129][ T5831] usb 4-1: config 0 descriptor?? [ 1385.045887][ T5909] usb 1-1: USB disconnect, device number 6 [ 1385.626062][T23219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.694100][T23219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.741827][ T5895] xr_serial 3-1:127.171: xr_serial converter detected [ 1385.789125][ T5895] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1385.909164][ T5895] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1385.924842][T23236] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4857'. [ 1386.017889][ T5895] usb 3-1: USB disconnect, device number 100 [ 1386.039488][ T5895] xr_serial 3-1:127.171: device disconnected [ 1386.350047][T23239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4858'. [ 1386.780987][ T5831] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1386.788490][ T5831] gspca_stk1135: reg_w 0x2 err -71 [ 1386.795011][ T5831] gspca_stk1135: serial bus timeout: status=0x00 [ 1386.798491][ T5895] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1386.801980][ T5831] gspca_stk1135: Sensor write failed [ 1386.882205][ T5831] gspca_stk1135: serial bus timeout: status=0x00 [ 1386.901178][ T5831] gspca_stk1135: Sensor write failed [ 1386.907794][ T5831] gspca_stk1135: serial bus timeout: status=0x00 [ 1386.917758][ T5831] gspca_stk1135: Sensor read failed [ 1386.940911][ T5831] gspca_stk1135: serial bus timeout: status=0x00 [ 1386.958013][ T5831] gspca_stk1135: Sensor read failed [ 1386.969761][ T5831] gspca_stk1135: Detected sensor type unknown (0x0) [ 1386.984247][ T5831] gspca_stk1135: serial bus timeout: status=0x00 [ 1387.002988][ T5831] gspca_stk1135: Sensor read failed [ 1387.015029][ T5831] gspca_stk1135: serial bus timeout: status=0x00 [ 1387.017835][ T5895] usb 3-1: config 1 has an invalid descriptor of length 238, skipping remainder of the config [ 1387.043824][ T5831] gspca_stk1135: Sensor read failed [ 1387.050326][ T5895] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1387.067685][ T5831] gspca_stk1135: serial bus timeout: status=0x00 [ 1387.085785][ T5831] gspca_stk1135: Sensor write failed [ 1387.095853][ T5831] gspca_stk1135: serial bus timeout: status=0x00 [ 1387.124138][ T5895] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1387.142429][ T5831] gspca_stk1135: Sensor write failed [ 1387.142427][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1387.142449][ T5895] usb 3-1: SerialNumber: syz [ 1387.165288][ T5938] usb 5-1: USB disconnect, device number 121 [ 1387.199271][ T5831] stk1135 4-1:0.49: probe with driver stk1135 failed with error -71 [ 1387.256167][ T5831] usb 4-1: USB disconnect, device number 121 [ 1387.500464][T23248] dns_resolver: Unsupported server list version (0) [ 1387.533974][ T5895] usb 3-1: 0:2 : does not exist [ 1387.549281][ T5895] usb 3-1: unit 255 not found! [ 1387.573020][ T5895] usb 3-1: USB disconnect, device number 101 [ 1387.624721][ T6275] udevd[6275]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1388.008481][ T5938] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1388.137860][ T5831] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1388.215164][T23261] fuse: Bad value for 'fd' [ 1388.290000][ T5831] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.314384][ T5831] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1388.338923][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.355157][ T5831] usb 2-1: config 0 descriptor?? [ 1388.374396][ T5831] pwc: Askey VC010 type 2 USB webcam detected. [ 1388.497851][ T5902] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1388.507604][T23268] binder: 23267:23268 ioctl c00c6211 ffffffffffffffff returned -14 [ 1388.657874][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 1388.666160][ T5902] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1388.675551][ T5902] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1388.684357][ T5902] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1388.700247][ T5902] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1388.721394][ T5902] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1388.735392][ T5902] usb 3-1: config 0 has no interface number 0 [ 1388.741928][ T5902] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1388.754451][ T5902] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1388.765889][ T5902] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1388.776140][ T5902] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1388.792545][ T5902] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1388.799822][ T5902] usb 3-1: config 0 interface 125 has no altsetting 2 [ 1388.811693][ T5902] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1388.823192][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.833416][T23257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.850674][T23257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.861563][ T5902] usb 3-1: Product: syz [ 1388.865796][ T5902] usb 3-1: Manufacturer: syz [ 1388.873190][ T5831] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1388.879727][ T5902] usb 3-1: SerialNumber: syz [ 1388.888934][ T5831] pwc: recv_control_msg error -32 req 02 val 2700 [ 1389.396933][ T5902] usb 3-1: config 0 descriptor?? [ 1389.402826][ T5831] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1389.412000][ T5902] usb 3-1: selecting invalid altsetting 2 [ 1389.463888][ T5831] pwc: recv_control_msg error -32 req 04 val 1000 [ 1389.681012][ T5831] pwc: recv_control_msg error -32 req 04 val 1300 [ 1389.726303][ T5831] pwc: recv_control_msg error -32 req 04 val 1400 [ 1389.734834][ T5831] pwc: recv_control_msg error -32 req 02 val 2000 [ 1389.948848][ T5831] pwc: recv_control_msg error -71 req 04 val 1500 [ 1389.960358][ T5831] pwc: recv_control_msg error -71 req 02 val 2500 [ 1389.974832][ T5831] pwc: recv_control_msg error -71 req 02 val 2400 [ 1389.987588][ T5831] pwc: recv_control_msg error -71 req 02 val 2600 [ 1390.018207][ T5831] pwc: recv_control_msg error -71 req 02 val 2900 [ 1390.229958][ T5831] pwc: recv_control_msg error -71 req 02 val 2800 [ 1390.318090][ T5831] pwc: recv_control_msg error -71 req 04 val 1100 [ 1390.516484][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1390.516565][ T30] audit: type=1800 audit(1762969293.777:1395): pid=23289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4872" name="file1" dev="tmpfs" ino=1887 res=0 errno=0 [ 1390.548122][ T5831] pwc: recv_control_msg error -71 req 04 val 1200 [ 1390.643265][ T5902] get_1284_register timeout [ 1390.677855][ T5831] pwc: Registered as video103. [ 1390.682840][ T5902] uss720 3-1:0.125: probe with driver uss720 failed with error -5 [ 1390.690822][ C1] usb 3-1: async_complete: urb error -104 [ 1390.690971][ C1] usb 3-1: async_complete: urb error -104 [ 1390.691097][ C1] usb 3-1: async_complete: urb error -104 [ 1390.720829][ T5831] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input122 [ 1390.798224][ T5831] usb 2-1: USB disconnect, device number 82 [ 1390.884282][T23293] fuse: Bad value for 'fd' [ 1392.349381][ T5902] usb 3-1: USB disconnect, device number 102 [ 1393.070785][T23315] fuse: Bad value for 'fd' [ 1393.457778][ T5902] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1393.667085][ T5902] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.716028][ T5902] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1393.740342][ T5902] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1393.762816][ T5902] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1393.772943][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.803014][ T5902] usb 3-1: Product: syz [ 1393.846764][ T5902] usb 3-1: Manufacturer: syz [ 1393.867756][ T1212] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1393.902406][ T5902] usb 3-1: SerialNumber: syz [ 1393.926179][ T5902] cdc_mbim 3-1:1.0: skipping garbage [ 1393.967827][ T5895] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1393.976301][T22325] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1394.057798][ T1212] usb 1-1: Using ep0 maxpacket: 8 [ 1394.082417][ T1212] usb 1-1: config 127 has an invalid interface number: 171 but max is 1 [ 1394.095039][ T1212] usb 1-1: config 127 has no interface number 1 [ 1394.102020][ T1212] usb 1-1: config 127 interface 171 has no altsetting 0 [ 1394.114235][ T1212] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1394.123578][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.134218][ T1212] usb 1-1: Product: syz [ 1394.144368][ T5895] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1394.156804][T22325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.167735][ T1212] usb 1-1: Manufacturer: syz [ 1394.175974][ T1212] usb 1-1: SerialNumber: syz [ 1394.181103][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.192157][T22325] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1394.192912][T23337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.206529][ T5895] usb 4-1: Product: syz [ 1394.214814][ T5895] usb 4-1: Manufacturer: syz [ 1394.266522][T22325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.267155][T23337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.285203][ T5895] usb 4-1: SerialNumber: syz [ 1394.310380][ T5895] usb 4-1: config 0 descriptor?? [ 1394.316495][T22325] usb 2-1: config 0 descriptor?? [ 1394.331030][T22325] pwc: Askey VC010 type 2 USB webcam detected. [ 1394.347823][T23338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.358568][T23338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.387860][ T5831] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1394.537581][T23329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.547672][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1394.549680][T23329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.570258][ T5831] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1394.579218][ T5895] mos7840 4-1:0.0: required endpoints missing [ 1394.603940][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.612815][ T5895] usb 4-1: USB disconnect, device number 123 [ 1394.659734][ T5831] usb 5-1: Product: syz [ 1394.668793][ T5831] usb 5-1: Manufacturer: syz [ 1394.677504][ T5831] usb 5-1: SerialNumber: syz [ 1394.694352][ T5831] usb 5-1: config 0 descriptor?? [ 1394.729484][T23330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.739496][T23330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.755633][T22325] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1394.763500][T22325] pwc: recv_control_msg error -32 req 02 val 2700 [ 1394.772367][T22325] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1394.780190][T22325] pwc: recv_control_msg error -32 req 04 val 1000 [ 1394.787520][T22325] pwc: recv_control_msg error -32 req 04 val 1300 [ 1394.795476][T22325] pwc: recv_control_msg error -32 req 04 val 1400 [ 1394.803886][T22325] pwc: recv_control_msg error -32 req 02 val 2000 [ 1395.013413][T22325] pwc: recv_control_msg error -71 req 04 val 1500 [ 1395.028534][T22325] pwc: recv_control_msg error -71 req 02 val 2500 [ 1395.035855][T22325] pwc: recv_control_msg error -71 req 02 val 2400 [ 1395.044836][T22325] pwc: recv_control_msg error -71 req 02 val 2600 [ 1395.052011][T22325] pwc: recv_control_msg error -71 req 02 val 2900 [ 1395.060878][T22325] pwc: recv_control_msg error -71 req 02 val 2800 [ 1395.068154][T22325] pwc: recv_control_msg error -71 req 04 val 1100 [ 1395.075199][T22325] pwc: recv_control_msg error -71 req 04 val 1200 [ 1395.089039][T22325] pwc: Registered as video103. [ 1395.101765][T22325] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input123 [ 1395.161145][T22325] usb 2-1: USB disconnect, device number 83 [ 1395.247265][T23341] fuse: Bad value for 'fd' [ 1395.765253][T23348] netlink: 'syz.1.4891': attribute type 34 has an invalid length. [ 1395.801991][T23348] FAULT_INJECTION: forcing a failure. [ 1395.801991][T23348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1395.828212][T23348] CPU: 1 UID: 0 PID: 23348 Comm: syz.1.4891 Not tainted syzkaller #0 PREEMPT(full) [ 1395.828238][T23348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1395.828250][T23348] Call Trace: [ 1395.828261][T23348] [ 1395.828269][T23348] dump_stack_lvl+0x189/0x250 [ 1395.828296][T23348] ? __pfx____ratelimit+0x10/0x10 [ 1395.828320][T23348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1395.828341][T23348] ? __pfx__printk+0x10/0x10 [ 1395.828371][T23348] should_fail_ex+0x414/0x560 [ 1395.828403][T23348] _copy_to_user+0x31/0xb0 [ 1395.828427][T23348] simple_read_from_buffer+0xe1/0x170 [ 1395.828457][T23348] proc_fail_nth_read+0x1b3/0x220 [ 1395.828482][T23348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1395.828507][T23348] ? rw_verify_area+0x2a6/0x4d0 [ 1395.828527][T23348] ? __lock_acquire+0xab9/0xd20 [ 1395.828542][T23348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1395.828565][T23348] vfs_read+0x200/0xa30 [ 1395.828586][T23348] ? fdget_pos+0x247/0x320 [ 1395.828607][T23348] ? __pfx___mutex_lock+0x10/0x10 [ 1395.828631][T23348] ? __pfx_vfs_read+0x10/0x10 [ 1395.828655][T23348] ? __fget_files+0x2a/0x420 [ 1395.828676][T23348] ? __fget_files+0x3a0/0x420 [ 1395.828691][T23348] ? __fget_files+0x2a/0x420 [ 1395.828716][T23348] ksys_read+0x145/0x250 [ 1395.828741][T23348] ? __pfx_ksys_read+0x10/0x10 [ 1395.828767][T23348] ? do_syscall_64+0xbe/0xfa0 [ 1395.828795][T23348] do_syscall_64+0xfa/0xfa0 [ 1395.828819][T23348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.828835][T23348] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1395.828853][T23348] ? clear_bhb_loop+0x60/0xb0 [ 1395.828875][T23348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.828892][T23348] RIP: 0033:0x7f511a18e0dc [ 1395.828909][T23348] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1395.828924][T23348] RSP: 002b:00007f511af68030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1395.828944][T23348] RAX: ffffffffffffffda RBX: 00007f511a3e5fa0 RCX: 00007f511a18e0dc [ 1395.828957][T23348] RDX: 000000000000000f RSI: 00007f511af680a0 RDI: 0000000000000005 [ 1395.828968][T23348] RBP: 00007f511af68090 R08: 0000000000000000 R09: 0000000000000000 [ 1395.828979][T23348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1395.828990][T23348] R13: 00007f511a3e6038 R14: 00007f511a3e5fa0 R15: 00007f511a50fa28 [ 1395.829021][T23348] [ 1396.134784][ T5902] cdc_mbim 3-1:1.0: bind() failure [ 1396.160797][ T5902] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1396.167735][ T5902] cdc_ncm 3-1:1.1: bind() failure [ 1396.176835][ T5902] usb 3-1: USB disconnect, device number 103 [ 1396.405599][ T1212] xr_serial 1-1:127.171: xr_serial converter detected [ 1396.416566][ T1212] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1396.427767][T22325] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 1396.582064][ T1212] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1396.602897][ T1212] usb 1-1: USB disconnect, device number 7 [ 1396.620828][ T1212] xr_serial 1-1:127.171: device disconnected [ 1396.841497][T22325] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1396.850573][T22325] usb 4-1: not running at top speed; connect to a high speed hub [ 1396.861387][T22325] usb 4-1: config 2 has an invalid interface number: 226 but max is 1 [ 1396.870666][T22325] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.882370][T22325] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1396.891509][T22325] usb 4-1: config 2 has no interface number 0 [ 1396.898420][T22325] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1396.910376][T22325] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1396.922085][T22325] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1396.937558][T22325] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1396.947951][T22325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.956063][T22325] usb 4-1: Product: syz [ 1396.960380][T22325] usb 4-1: Manufacturer: syz [ 1396.978615][ T5902] usb 5-1: USB disconnect, device number 122 [ 1397.014608][T22325] usb 4-1: SerialNumber: syz [ 1397.282255][T22325] usb 4-1: USB disconnect, device number 124 [ 1397.368997][T23371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1397.808183][ T1212] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1397.922693][T23381] fuse: Bad value for 'fd' [ 1397.960009][ T1212] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.970365][ T1212] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1397.983334][ T1212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.999259][ T1212] usb 3-1: config 0 descriptor?? [ 1398.009056][ T1212] pwc: Askey VC010 type 2 USB webcam detected. [ 1398.127756][T22325] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1398.337749][T22325] usb 4-1: Using ep0 maxpacket: 16 [ 1398.351719][T22325] usb 4-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 1398.387756][T22325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.416167][T22325] usb 4-1: Product: syz [ 1398.426358][T22325] usb 4-1: Manufacturer: syz [ 1398.446515][T22325] usb 4-1: SerialNumber: syz [ 1398.462928][T22325] usb 4-1: config 0 descriptor?? [ 1398.496193][T22325] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 1398.548874][T23373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.559127][T23373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.569017][ T1212] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1398.577531][ T1212] pwc: recv_control_msg error -32 req 02 val 2700 [ 1398.585444][ T1212] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1398.598693][ T1212] pwc: recv_control_msg error -32 req 04 val 1000 [ 1398.624127][ T1212] pwc: recv_control_msg error -32 req 04 val 1300 [ 1398.634435][ T1212] pwc: recv_control_msg error -32 req 04 val 1400 [ 1398.663476][ T1212] pwc: recv_control_msg error -32 req 02 val 2000 [ 1398.678421][ T1212] pwc: recv_control_msg error -71 req 02 val 2100 [ 1398.689393][T23389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4903'. [ 1398.694107][ T1212] pwc: recv_control_msg error -71 req 04 val 1500 [ 1398.723821][ T1212] pwc: recv_control_msg error -71 req 02 val 2500 [ 1398.731734][ T1212] pwc: recv_control_msg error -71 req 02 val 2400 [ 1398.748281][ T1212] pwc: recv_control_msg error -71 req 02 val 2600 [ 1398.765444][ T1212] pwc: recv_control_msg error -71 req 02 val 2900 [ 1398.775310][ T1212] pwc: recv_control_msg error -71 req 02 val 2800 [ 1398.785407][ T1212] pwc: recv_control_msg error -71 req 04 val 1100 [ 1398.792894][ T1212] pwc: recv_control_msg error -71 req 04 val 1200 [ 1398.811617][ T1212] pwc: Registered as video103. [ 1398.821882][ T1212] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input124 [ 1398.864067][ T1212] usb 3-1: USB disconnect, device number 104 [ 1399.317771][T22325] gspca_sn9c20x: Write register 1001 failed -110 [ 1399.324128][T22325] gspca_sn9c20x: Device initialization failed [ 1399.447799][T22325] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 1399.910035][ T1212] usb 4-1: USB disconnect, device number 125 [ 1399.946361][T23406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1401.875482][ T1212] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1402.026889][T23433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4913'. [ 1402.057993][ T1212] usb 2-1: Using ep0 maxpacket: 8 [ 1402.073832][ T1212] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 1402.092524][ T1212] usb 2-1: config 127 has no interface number 1 [ 1402.101839][ T1212] usb 2-1: config 127 interface 171 has no altsetting 0 [ 1402.111877][ T1212] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1402.122793][ T30] audit: type=1326 audit(1762969305.377:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23434 comm="syz.0.4914" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88ce78f6c9 code=0x0 [ 1402.182983][T23439] dns_resolver: Unsupported server list version (0) [ 1402.348038][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.566757][ T5909] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1402.708075][ T1212] usb 2-1: Product: syz [ 1402.712281][ T1212] usb 2-1: Manufacturer: syz [ 1402.727738][ T1212] usb 2-1: SerialNumber: syz [ 1402.847821][T14993] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1402.889935][ T5909] usb 3-1: config 1 has an invalid descriptor of length 238, skipping remainder of the config [ 1402.904150][ T5909] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1402.914450][ T5909] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1402.926609][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1402.935053][ T5909] usb 3-1: SerialNumber: syz [ 1402.997787][T14993] usb 1-1: Using ep0 maxpacket: 16 [ 1403.004941][T14993] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 1403.016403][T14993] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1403.023128][ T5902] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1403.031083][T14993] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1403.046434][T14993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.062679][T14993] usb 1-1: config 0 descriptor?? [ 1403.161690][ T5909] usb 3-1: 0:2 : does not exist [ 1403.167008][ T5909] usb 3-1: unit 255 not found! [ 1403.176541][ T5909] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1403.192363][ T5902] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1403.201978][ T5902] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1403.211655][ T5909] usb 3-1: USB disconnect, device number 105 [ 1403.212341][ T5902] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1403.228412][ T5902] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1403.238977][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1403.255599][ T5902] usb 4-1: Product: syz [ 1403.260867][ T5902] usb 4-1: Manufacturer: syz [ 1403.265666][ T5902] usb 4-1: SerialNumber: syz [ 1403.268181][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1403.279805][ T5902] usb 4-1: config 0 descriptor?? [ 1403.295239][ T5902] hub 4-1:0.0: bad descriptor, ignoring hub [ 1403.306696][ T5902] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1403.320475][ T5902] usb 4-1: selecting invalid altsetting 0 [ 1403.486643][T14993] nzxt-smart2 0003:1E71:2009.0066: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1404.019851][T23445] usb 4-1: reset high-speed USB device number 126 using dummy_hcd [ 1404.087780][ T1212] xr_serial 2-1:127.171: xr_serial converter detected [ 1404.115299][ T1212] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1404.138432][ T1212] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1404.166740][ T1212] usb 2-1: USB disconnect, device number 84 [ 1404.190575][ T1212] xr_serial 2-1:127.171: device disconnected [ 1404.746338][T23444] [U]  [ 1404.778257][ T5895] usb 4-1: USB disconnect, device number 126 [ 1404.785530][ T1212] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1405.049363][T23469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1405.056215][ T1212] usb 2-1: Using ep0 maxpacket: 16 [ 1405.090709][ T1212] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 1405.105217][ T1212] usb 2-1: config 0 has no interface number 0 [ 1405.116807][ T1212] usb 2-1: config 0 interface 161 has no altsetting 0 [ 1405.161195][ T1212] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1405.252432][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.370109][ T1212] usb 2-1: Product: syz [ 1405.388161][ T1212] usb 2-1: Manufacturer: syz [ 1405.403694][ T1212] usb 2-1: SerialNumber: syz [ 1405.430243][ T1212] usb 2-1: config 0 descriptor?? [ 1405.452767][ T1212] ums-jumpshot 2-1:0.161: USB Mass Storage device detected [ 1405.634757][ T1212] ums-jumpshot 2-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 1406.778045][T14993] usb 1-1: USB disconnect, device number 8 [ 1407.297945][T14993] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1407.409862][ T5831] usb 2-1: USB disconnect, device number 85 [ 1407.463309][T14993] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.482452][T14993] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1407.492163][T14993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.534991][T14993] usb 1-1: config 0 descriptor?? [ 1407.552887][T14993] pwc: Askey VC010 type 2 USB webcam detected. [ 1407.667840][ T5909] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1407.817782][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 1407.825938][ T5909] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 1407.834865][ T5909] usb 3-1: config 127 has no interface number 1 [ 1407.841276][ T5909] usb 3-1: config 127 interface 171 has no altsetting 0 [ 1407.867159][ T5909] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1407.867874][ T5831] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1407.914450][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.930317][ T5909] usb 3-1: Product: syz [ 1407.938483][ T5909] usb 3-1: Manufacturer: syz [ 1407.985496][ T5909] usb 3-1: SerialNumber: syz [ 1407.987382][T23490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.002897][T23490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.029523][T14993] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1408.036655][T14993] pwc: recv_control_msg error -32 req 02 val 2700 [ 1408.053115][T14993] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1408.060612][T14993] pwc: recv_control_msg error -32 req 04 val 1000 [ 1408.075264][T14993] pwc: recv_control_msg error -32 req 04 val 1300 [ 1408.087716][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 1408.095992][ T5831] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1408.104903][ T5831] usb 2-1: config 0 has no interface number 0 [ 1408.112263][ T5831] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1408.144999][T14993] pwc: recv_control_msg error -32 req 04 val 1400 [ 1408.166101][T14993] pwc: recv_control_msg error -32 req 02 val 2000 [ 1408.174991][ T5831] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1408.187420][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.202205][T14993] pwc: recv_control_msg error -71 req 02 val 2100 [ 1408.209563][ T5831] usb 2-1: Product: syz [ 1408.215339][T14993] pwc: recv_control_msg error -71 req 04 val 1500 [ 1408.222468][ T5831] usb 2-1: Manufacturer: syz [ 1408.227132][ T5831] usb 2-1: SerialNumber: syz [ 1408.232537][T14993] pwc: recv_control_msg error -71 req 02 val 2500 [ 1408.256523][ T5831] usb 2-1: config 0 descriptor?? [ 1408.263975][T14993] pwc: recv_control_msg error -71 req 02 val 2400 [ 1408.276184][ T5831] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1408.287272][ T5831] em28xx 2-1:0.132: Video interface 132 found: [ 1408.295267][T14993] pwc: recv_control_msg error -71 req 02 val 2600 [ 1408.305618][T14993] pwc: recv_control_msg error -71 req 02 val 2900 [ 1408.327732][T14993] pwc: recv_control_msg error -71 req 02 val 2800 [ 1408.335192][T14993] pwc: recv_control_msg error -71 req 04 val 1100 [ 1408.345458][T14993] pwc: recv_control_msg error -71 req 04 val 1200 [ 1408.392625][T14993] pwc: Registered as video103. [ 1408.450315][T14993] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input125 [ 1408.513340][T14993] usb 1-1: USB disconnect, device number 9 [ 1408.693025][ T5831] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1409.123888][T23514] geneve3: entered allmulticast mode [ 1409.141051][ T1212] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1409.304432][ T1212] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.318186][ T1212] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1409.327868][ T1212] usb 1-1: New USB device strings: Mfr=154, Product=0, SerialNumber=0 [ 1409.343119][ T1212] usb 1-1: Manufacturer: syz [ 1409.454168][ T5831] em28xx 2-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1409.471194][ T5831] em28xx 2-1:0.132: failed to read eeprom (err=-5) [ 1409.481697][ T5831] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1409.482411][ T1212] usb 1-1: config 0 descriptor?? [ 1409.568006][ T5831] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1409.582937][ T5831] em28xx 2-1:0.132: analog set to bulk mode. [ 1409.603141][T14993] em28xx 2-1:0.132: Registering V4L2 extension [ 1409.642096][ T5831] usb 2-1: USB disconnect, device number 86 [ 1409.728615][T14993] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 1409.758048][ T5831] em28xx 2-1:0.132: Disconnecting em28xx [ 1409.877000][T23527] netlink: 'syz.0.4933': attribute type 10 has an invalid length. [ 1410.127364][T14993] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1410.134819][T14993] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1410.333022][T23533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4937'. [ 1410.363007][T14993] em28xx 2-1:0.132: No AC97 audio processor [ 1410.991476][ T5909] xr_serial 3-1:127.171: xr_serial converter detected [ 1411.136124][ T5909] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1411.164266][ T5909] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1411.287366][T14993] usb 2-1: Decoder not found [ 1411.320250][ T5909] usb 3-1: USB disconnect, device number 106 [ 1411.341763][ T5909] xr_serial 3-1:127.171: device disconnected [ 1411.362786][T14993] em28xx 2-1:0.132: failed to create media graph [ 1411.444694][T14993] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1411.469618][T14993] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1411.478665][ T5831] em28xx 2-1:0.132: Closing input extension [ 1411.486378][ T5831] ================================================================== [ 1411.494463][ T5831] BUG: KASAN: slab-use-after-free in media_device_unregister+0x141/0x400 [ 1411.502891][ T5831] Read of size 8 at addr ffff88807ed50210 by task kworker/1:3/5831 [ 1411.510773][ T5831] [ 1411.513087][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 1411.513104][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1411.513115][ T5831] Workqueue: usb_hub_wq hub_event [ 1411.513133][ T5831] Call Trace: [ 1411.513140][ T5831] [ 1411.513147][ T5831] dump_stack_lvl+0x189/0x250 [ 1411.513169][ T5831] ? rcu_is_watching+0x15/0xb0 [ 1411.513188][ T5831] ? __kasan_check_byte+0x12/0x40 [ 1411.513202][ T5831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1411.513218][ T5831] ? rcu_is_watching+0x15/0xb0 [ 1411.513232][ T5831] ? lock_release+0x4b/0x3e0 [ 1411.513248][ T5831] ? __virt_addr_valid+0x1c8/0x5c0 [ 1411.513266][ T5831] ? __virt_addr_valid+0x4a5/0x5c0 [ 1411.513283][ T5831] print_report+0xca/0x240 [ 1411.513298][ T5831] ? media_device_unregister+0x141/0x400 [ 1411.513318][ T5831] kasan_report+0x118/0x150 [ 1411.513333][ T5831] ? media_device_unregister+0x141/0x400 [ 1411.513352][ T5831] media_device_unregister+0x141/0x400 [ 1411.513372][ T5831] em28xx_release_resources+0xac/0x240 [ 1411.513390][ T5831] em28xx_usb_disconnect+0x19f/0x2f0 [ 1411.513408][ T5831] usb_unbind_interface+0x26e/0x910 [ 1411.513424][ T5831] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1411.513444][ T5831] device_release_driver_internal+0x4d9/0x800 [ 1411.513469][ T5831] bus_remove_device+0x34d/0x410 [ 1411.513485][ T5831] device_del+0x511/0x8e0 [ 1411.513503][ T5831] ? __pfx_device_del+0x10/0x10 [ 1411.513518][ T5831] ? kobject_put+0x446/0x480 [ 1411.513539][ T5831] usb_disable_device+0x3e9/0x8a0 [ 1411.513555][ T5831] usb_disconnect+0x330/0x950 [ 1411.513574][ T5831] hub_event+0x1cf5/0x4a20 [ 1411.513599][ T5831] ? do_raw_spin_lock+0x121/0x290 [ 1411.513617][ T5831] ? register_lock_class+0x51/0x320 [ 1411.513635][ T5831] ? __pfx_hub_event+0x10/0x10 [ 1411.513647][ T5831] ? process_scheduled_works+0x9ef/0x17b0 [ 1411.513663][ T5831] ? _raw_spin_unlock_irq+0x23/0x50 [ 1411.513679][ T5831] ? process_scheduled_works+0x9ef/0x17b0 [ 1411.513693][ T5831] ? process_scheduled_works+0x9ef/0x17b0 [ 1411.513707][ T5831] process_scheduled_works+0xae1/0x17b0 [ 1411.513733][ T5831] ? __pfx_process_scheduled_works+0x10/0x10 [ 1411.513753][ T5831] worker_thread+0x8a0/0xda0 [ 1411.513775][ T5831] kthread+0x711/0x8a0 [ 1411.513792][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 1411.513805][ T5831] ? __pfx_kthread+0x10/0x10 [ 1411.513822][ T5831] ? _raw_spin_unlock_irq+0x23/0x50 [ 1411.513837][ T5831] ? lockdep_hardirqs_on+0x9c/0x150 [ 1411.513854][ T5831] ? __pfx_kthread+0x10/0x10 [ 1411.513875][ T5831] ret_from_fork+0x4bc/0x870 [ 1411.513889][ T5831] ? __pfx_ret_from_fork+0x10/0x10 [ 1411.513905][ T5831] ? __switch_to_asm+0x39/0x70 [ 1411.513915][ T5831] ? __switch_to_asm+0x33/0x70 [ 1411.513926][ T5831] ? __pfx_kthread+0x10/0x10 [ 1411.513942][ T5831] ret_from_fork_asm+0x1a/0x30 [ 1411.513958][ T5831] [ 1411.513964][ T5831] [ 1411.784750][ T5831] Allocated by task 14993: [ 1411.789153][ T5831] kasan_save_track+0x3e/0x80 [ 1411.793828][ T5831] __kasan_kmalloc+0x93/0xb0 [ 1411.798411][ T5831] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1411.803770][ T5831] em28xx_v4l2_init+0x10b/0x2e70 [ 1411.808723][ T5831] em28xx_init_extension+0x120/0x1c0 [ 1411.813998][ T5831] process_scheduled_works+0xae1/0x17b0 [ 1411.819531][ T5831] worker_thread+0x8a0/0xda0 [ 1411.824115][ T5831] kthread+0x711/0x8a0 [ 1411.828395][ T5831] ret_from_fork+0x4bc/0x870 [ 1411.832974][ T5831] ret_from_fork_asm+0x1a/0x30 [ 1411.837722][ T5831] [ 1411.840037][ T5831] Freed by task 14993: [ 1411.844086][ T5831] kasan_save_track+0x3e/0x80 [ 1411.848758][ T5831] __kasan_save_free_info+0x46/0x50 [ 1411.853951][ T5831] __kasan_slab_free+0x5c/0x80 [ 1411.858703][ T5831] kfree+0x19a/0x6d0 [ 1411.862598][ T5831] em28xx_v4l2_init+0x1683/0x2e70 [ 1411.867611][ T5831] em28xx_init_extension+0x120/0x1c0 [ 1411.872884][ T5831] process_scheduled_works+0xae1/0x17b0 [ 1411.878416][ T5831] worker_thread+0x8a0/0xda0 [ 1411.882989][ T5831] kthread+0x711/0x8a0 [ 1411.887128][ T5831] ret_from_fork+0x4bc/0x870 [ 1411.891700][ T5831] ret_from_fork_asm+0x1a/0x30 [ 1411.896449][ T5831] [ 1411.898760][ T5831] The buggy address belongs to the object at ffff88807ed50000 [ 1411.898760][ T5831] which belongs to the cache kmalloc-8k of size 8192 [ 1411.912799][ T5831] The buggy address is located 528 bytes inside of [ 1411.912799][ T5831] freed 8192-byte region [ffff88807ed50000, ffff88807ed52000) [ 1411.926758][ T5831] [ 1411.929064][ T5831] The buggy address belongs to the physical page: [ 1411.935499][ T5831] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ed50 [ 1411.944243][ T5831] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1411.952723][ T5831] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1411.960252][ T5831] page_type: f5(slab) [ 1411.964225][ T5831] raw: 00fff00000000040 ffff88801a027280 ffffea0001f72a00 0000000000000006 [ 1411.972797][ T5831] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1411.981367][ T5831] head: 00fff00000000040 ffff88801a027280 ffffea0001f72a00 0000000000000006 [ 1411.990024][ T5831] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1411.998677][ T5831] head: 00fff00000000003 ffffea0001fb5401 00000000ffffffff 00000000ffffffff [ 1412.007333][ T5831] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1412.015988][ T5831] page dumped because: kasan: bad access detected [ 1412.022394][ T5831] page_owner tracks the page as allocated [ 1412.028087][ T5831] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 23047, tgid 23043 (syz.2.4806), ts 1369224982044, free_ts 1359607832357 [ 1412.049776][ T5831] post_alloc_hook+0x240/0x2a0 [ 1412.054552][ T5831] get_page_from_freelist+0x2365/0x2440 [ 1412.060089][ T5831] __alloc_frozen_pages_noprof+0x181/0x370 [ 1412.065882][ T5831] alloc_pages_mpol+0x232/0x4a0 [ 1412.070713][ T5831] allocate_slab+0x96/0x350 [ 1412.075204][ T5831] ___slab_alloc+0xf56/0x1990 [ 1412.079864][ T5831] __slab_alloc+0x65/0x100 [ 1412.084262][ T5831] __kmalloc_cache_noprof+0x411/0x6f0 [ 1412.089632][ T5831] audit_log_d_path+0xb8/0x1a0 [ 1412.094395][ T5831] audit_log_d_path_exe+0x42/0x70 [ 1412.099408][ T5831] audit_log_task+0x2b3/0x3c0 [ 1412.104068][ T5831] audit_seccomp+0x86/0x190 [ 1412.108556][ T5831] __seccomp_filter+0xce4/0x1e10 [ 1412.113477][ T5831] syscall_trace_enter+0xaa/0x160 [ 1412.118486][ T5831] do_syscall_64+0xd3/0xfa0 [ 1412.122977][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.128866][ T5831] page last free pid 5909 tgid 5909 stack trace: [ 1412.135189][ T5831] __free_frozen_pages+0xbc4/0xd30 [ 1412.140305][ T5831] __put_partials+0x146/0x170 [ 1412.144973][ T5831] put_cpu_partial+0x1f2/0x2e0 [ 1412.149726][ T5831] __slab_free+0x2b9/0x390 [ 1412.154134][ T5831] qlist_free_all+0x97/0x140 [ 1412.158711][ T5831] kasan_quarantine_reduce+0x148/0x160 [ 1412.164158][ T5831] __kasan_slab_alloc+0x22/0x80 [ 1412.168997][ T5831] __kmalloc_cache_noprof+0x36f/0x6f0 [ 1412.174360][ T5831] usb_control_msg+0x73/0x3e0 [ 1412.179024][ T5831] hub_ext_port_status+0x116/0x820 [ 1412.184122][ T5831] hub_port_debounce+0x220/0x310 [ 1412.189057][ T5831] hub_event+0x1d89/0x4a20 [ 1412.193464][ T5831] process_scheduled_works+0xae1/0x17b0 [ 1412.199017][ T5831] worker_thread+0x8a0/0xda0 [ 1412.203596][ T5831] kthread+0x711/0x8a0 [ 1412.207654][ T5831] ret_from_fork+0x4bc/0x870 [ 1412.212235][ T5831] [ 1412.214546][ T5831] Memory state around the buggy address: [ 1412.220160][ T5831] ffff88807ed50100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1412.228205][ T5831] ffff88807ed50180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1412.236249][ T5831] >ffff88807ed50200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1412.244293][ T5831] ^ [ 1412.248864][ T5831] ffff88807ed50280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1412.256908][ T5831] ffff88807ed50300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1412.264949][ T5831] ================================================================== [ 1412.322804][ T5831] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1412.330023][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 1412.339374][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1412.349414][ T5831] Workqueue: usb_hub_wq hub_event [ 1412.354447][ T5831] Call Trace: [ 1412.357724][ T5831] [ 1412.360648][ T5831] dump_stack_lvl+0x99/0x250 [ 1412.365239][ T5831] ? __asan_memcpy+0x40/0x70 [ 1412.369831][ T5831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1412.375009][ T5831] ? __pfx__printk+0x10/0x10 [ 1412.379588][ T5831] vpanic+0x237/0x6d0 [ 1412.383604][ T5831] ? __pfx_vpanic+0x10/0x10 [ 1412.388096][ T5831] ? preempt_schedule+0xae/0xc0 [ 1412.392974][ T5831] ? __pfx_preempt_schedule+0x10/0x10 [ 1412.398355][ T5831] panic+0xb9/0xc0 [ 1412.402073][ T5831] ? __pfx_panic+0x10/0x10 [ 1412.406535][ T5831] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1412.412435][ T5831] ? media_device_unregister+0x141/0x400 [ 1412.418057][ T5831] check_panic_on_warn+0x89/0xb0 [ 1412.422991][ T5831] ? media_device_unregister+0x141/0x400 [ 1412.428631][ T5831] end_report+0x78/0x160 [ 1412.432944][ T5831] kasan_report+0x129/0x150 [ 1412.437442][ T5831] ? media_device_unregister+0x141/0x400 [ 1412.443066][ T5831] media_device_unregister+0x141/0x400 [ 1412.448635][ T5831] em28xx_release_resources+0xac/0x240 [ 1412.454197][ T5831] em28xx_usb_disconnect+0x19f/0x2f0 [ 1412.459491][ T5831] usb_unbind_interface+0x26e/0x910 [ 1412.464681][ T5831] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1412.470405][ T5831] device_release_driver_internal+0x4d9/0x800 [ 1412.476461][ T5831] bus_remove_device+0x34d/0x410 [ 1412.481398][ T5831] device_del+0x511/0x8e0 [ 1412.485730][ T5831] ? __pfx_device_del+0x10/0x10 [ 1412.490568][ T5831] ? kobject_put+0x446/0x480 [ 1412.495167][ T5831] usb_disable_device+0x3e9/0x8a0 [ 1412.500180][ T5831] usb_disconnect+0x330/0x950 [ 1412.504851][ T5831] hub_event+0x1cf5/0x4a20 [ 1412.509268][ T5831] ? do_raw_spin_lock+0x121/0x290 [ 1412.514288][ T5831] ? register_lock_class+0x51/0x320 [ 1412.519483][ T5831] ? __pfx_hub_event+0x10/0x10 [ 1412.524252][ T5831] ? process_scheduled_works+0x9ef/0x17b0 [ 1412.529969][ T5831] ? _raw_spin_unlock_irq+0x23/0x50 [ 1412.535149][ T5831] ? process_scheduled_works+0x9ef/0x17b0 [ 1412.540851][ T5831] ? process_scheduled_works+0x9ef/0x17b0 [ 1412.546563][ T5831] process_scheduled_works+0xae1/0x17b0 [ 1412.552119][ T5831] ? __pfx_process_scheduled_works+0x10/0x10 [ 1412.558083][ T5831] worker_thread+0x8a0/0xda0 [ 1412.562661][ T5831] kthread+0x711/0x8a0 [ 1412.566724][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 1412.571836][ T5831] ? __pfx_kthread+0x10/0x10 [ 1412.576419][ T5831] ? _raw_spin_unlock_irq+0x23/0x50 [ 1412.581600][ T5831] ? lockdep_hardirqs_on+0x9c/0x150 [ 1412.586852][ T5831] ? __pfx_kthread+0x10/0x10 [ 1412.591465][ T5831] ret_from_fork+0x4bc/0x870 [ 1412.596061][ T5831] ? __pfx_ret_from_fork+0x10/0x10 [ 1412.601181][ T5831] ? __switch_to_asm+0x39/0x70 [ 1412.605942][ T5831] ? __switch_to_asm+0x33/0x70 [ 1412.610691][ T5831] ? __pfx_kthread+0x10/0x10 [ 1412.615277][ T5831] ret_from_fork_asm+0x1a/0x30 [ 1412.620028][ T5831] [ 1412.623329][ T5831] Kernel Offset: disabled [ 1412.627642][ T5831] Rebooting in 86400 seconds..